d2e27e7b6f0286d9473bec31bc5dbd9d261922324ebef7dfeb0e483cf9879a4c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2e27e7b6f0286d9473bec31bc5dbd9d261922324ebef7dfeb0e483cf9879a4c
Size

1.2MB
MD5

cef3029126ef50252c0e2d232d959e1a
SHA1

ba26fb25d2204d107e1d3364e651f0f7730fe057
SHA256

d2e27e7b6f0286d9473bec31bc5dbd9d261922324ebef7dfeb0e483cf9879a4c
SHA512

9e5ddd440efc5cef3b2e49de3dbedbe6017f3c94751635fd98b8bfa08aa6566e94306e95457e25e9eee873cd427cd2e8f0f4e423be1ea595842db814dcb899a9
SSDEEP

24576:TJeJfAqkjp98zHpieTXCeGOxmI8/+po9TFEu5OHe:1eJfAJGpLrCeGOxmsQTFEu5OH

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

d2e27e7b6f0286d9473bec31bc5dbd9d261922324ebef7dfeb0e483cf9879a4c
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.spm
Size: 1B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE