bc8e437c2cb38de7d6b1fca48aa1b431a1229fbaa4fa2f1272328516d13c0c3e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc8e437c2cb38de7d6b1fca48aa1b431a1229fbaa4fa2f1272328516d13c0c3e
Size

979KB
MD5

a07f2d72e3b792075bd43bb62dc99231
SHA1

09c5f966b23fe0c4b1b143a50b973da02f685665
SHA256

bc8e437c2cb38de7d6b1fca48aa1b431a1229fbaa4fa2f1272328516d13c0c3e
SHA512

a196ee9ceec1bcdcb86407094391cb055bfbf7f59b06dc7305ca60b3f6d52c4deb51bbb238876dd6a6e263a7f3617131038184b6b15d0f4a7a565b01df69bec8
SSDEEP

12288:kpqwC/2OYICP4cejGSOpRK3CnIiO5lIfnu+kh:kpW/2rBPJLfpRK3CnHWlMch

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

bc8e437c2cb38de7d6b1fca48aa1b431a1229fbaa4fa2f1272328516d13c0c3e
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.1rdata
Size: 208KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

!>�A�
Size: 120KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tcwwqjd
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE