5d7068a70253b0e2f3e65e5b6d78f4a18ccf03bcb9ef7355f9885abc514d2f25 | Triage

Sharing

General

Target

5d7068a70253b0e2f3e65e5b6d78f4a18ccf03bcb9ef7355f9885abc514d2f25
Size

4.8MB
MD5

a7e071e49258fd8d785e4eeb7a5cdb58
SHA1

a97e4aef1ea61b91adace325401a1b9e68f54385
SHA256

5d7068a70253b0e2f3e65e5b6d78f4a18ccf03bcb9ef7355f9885abc514d2f25
SHA512

a0dd57d9e6021df6fcccfad89f76bfc837fe1e2a776d8b68aa2282b121cfbfe4ba99c61bc14ddfb18f38f46190fd43d1f0f93c8b0c878a0e877d1502901a57cc
SSDEEP

98304:C2cPK8m40SRfXZQ4014nMp8fS3WLSW11pezcXlo:NCKD41RfXZ9014nMp8hZpeAVo

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.

Processes:

resource yara_rule

sample autoit_exe

Files

5d7068a70253b0e2f3e65e5b6d78f4a18ccf03bcb9ef7355f9885abc514d2f25
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 470KB - Virtual size: 470KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 3.2MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE