5f00290c1e166a50567866bb01845641947e8b21bd5fa3923ca0c9ed76ecf0a1 | Triage

Sharing

General

Target

5f00290c1e166a50567866bb01845641947e8b21bd5fa3923ca0c9ed76ecf0a1
Size

1.1MB
MD5

c18704b7d884c1d90a5cb3a721a623e6
SHA1

0cad7d16d808c49eefbf49a9ae88dd28bf079ad0
SHA256

5f00290c1e166a50567866bb01845641947e8b21bd5fa3923ca0c9ed76ecf0a1
SHA512

5424beff3ec976f0f02b4477e84d506e3ed6f0e5a115da46b51b72f33ed9019f4293be0531e9618ccc90c9dd3c346a0c9983b6d2205d9eb10cd48e835e1fd9a6
SSDEEP

24576:0RmJkcoQricOIQxiZY1iaOG6OT8BfJSIQCDJ0OXNS:RJZoQrbTFZY1ia+pOEJ0OXNS

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

5f00290c1e166a50567866bb01845641947e8b21bd5fa3923ca0c9ed76ecf0a1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 514KB - Virtual size: 513KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.4143213
Size: 512B - Virtual size: 4KB

.main
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stub
Size: 388KB - Virtual size: 392KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE