8e4190b498a49c3cf97bfa899946f1c1306f9f056fd91502a533bad25be3fb2b | Triage

Sharing

General

Target

8e4190b498a49c3cf97bfa899946f1c1306f9f056fd91502a533bad25be3fb2b
Size

1.2MB
MD5

b5ddb2868cd31b10830d65a936f5b435
SHA1

6db463eaca3fe2333caad960e8076139b308838e
SHA256

8e4190b498a49c3cf97bfa899946f1c1306f9f056fd91502a533bad25be3fb2b
SHA512

b9b4597f2b3cf1fd7af3b7c7fbb461c25ceb161ce08130f6999a7f54f224acc901fd5eefde585f0ab6bef611e09a6af491ef0f48a4ac8ec42bd7f19c78809755
SSDEEP

12288:fpqtC/2OYICP4cejGSOpRK3CnIixwzTHbO2:fp3/2rBPJLfpRK3CnHxwR

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

8e4190b498a49c3cf97bfa899946f1c1306f9f056fd91502a533bad25be3fb2b
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.1rdata
Size: 318KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tvpxhrd
Size: 224KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE