7e01e4abd4f3e529df67027ac0886ed3fcbaed05e0d0eea2ce2e5659a6a1c09b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7e01e4abd4f3e529df67027ac0886ed3fcbaed05e0d0eea2ce2e5659a6a1c09b
Size

1.1MB
MD5

6ee225230884e4b814506f74a457ddb0
SHA1

c6633ef4836374c36008130fe0c4b2ad891193b9
SHA256

7e01e4abd4f3e529df67027ac0886ed3fcbaed05e0d0eea2ce2e5659a6a1c09b
SHA512

c77bdf7d8b63f3e4efb7f13c1e384e2adf9b777246b37fe7a8c9fdbab9f17b7aae12f32020eab830fbfb5caaab80a949cdf88c69ccd6f996baf45b189543b01b
SSDEEP

12288:zJeJfEuGstgg/kjp98zHpiO5toLxEvBSXyMa:zJeJfAqkjp98zHpiOToLCBcJa

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

7e01e4abd4f3e529df67027ac0886ed3fcbaed05e0d0eea2ce2e5659a6a1c09b
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.penask
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE