a8f631a8a3a62c0c78df13e33dd74250b24fbc4a8dcbea54643b1a2028ac9a72 | Triage

Sharing

General

Target

a8f631a8a3a62c0c78df13e33dd74250b24fbc4a8dcbea54643b1a2028ac9a72
Size

859KB
MD5

60a678f84c8f1b839e65e9f0e3916d3f
SHA1

c7c6b5ae0a6cca5b6748686d9bde8082700931ad
SHA256

a8f631a8a3a62c0c78df13e33dd74250b24fbc4a8dcbea54643b1a2028ac9a72
SHA512

611a56dc6257a8788dc7613cbc8e6bd9e782dcd1e185c0b86b49b65d4bae134c307ab28f49c3c963e744964c0729804fc4ffe7c90f4c1051d68385c8ea92b7eb
SSDEEP

12288:/pqiC/2OGAtkCP4cejSSOpRK3CGYd9xAIH:/po/2+ttPJHfpRK3CGYrf

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

a8f631a8a3a62c0c78df13e33dd74250b24fbc4a8dcbea54643b1a2028ac9a72
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ordata
Size: 85KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 122KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE