f224a21c35ea92fb7edf7a18870c645f2556af551af577b4c982d9c9a8034e24 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f224a21c35ea92fb7edf7a18870c645f2556af551af577b4c982d9c9a8034e24
Size

9.1MB
MD5

a6f74fef806ffef29107f031a104aaa7
SHA1

7c1e2b32e779d11dc71276409e7af73e4ca463a8
SHA256

f224a21c35ea92fb7edf7a18870c645f2556af551af577b4c982d9c9a8034e24
SHA512

f4e1c40afdf5ec261f185136f53488fe9e52793cbc45a8f0b7f2aad2168d5d8ba3183309e791d614ed92006ab5212c26ca0db6da6d28732afda04fd3dbda4a0b
SSDEEP

24576:FJeJfAqkjp98zHpieTo14uSVupRv6uM1jp98zHpieTX6eGOxmKoc7:DeJfAJGpL815MyEFGpLr6eGOxmzc7

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

f224a21c35ea92fb7edf7a18870c645f2556af551af577b4c982d9c9a8034e24
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.penask
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 7.7MB - Virtual size: 7.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE