722546aef0a00e2b36b0c8cca5d85b5d70dcbdb44d898510afebeaa7b7fa782e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

722546aef0a00e2b36b0c8cca5d85b5d70dcbdb44d898510afebeaa7b7fa782e
Size

510KB
MD5

207bd2e0e5041ba92c4d91c4c94f9d80
SHA1

3561b7477f8ae878fc455c263d312412b135814e
SHA256

722546aef0a00e2b36b0c8cca5d85b5d70dcbdb44d898510afebeaa7b7fa782e
SHA512

bb969d4ff658f00bc62b6b1df35bf87c3360dcfba7a80013204e0614544aa244a5c3b7fba33d07f2483e0e3cf53a9a95f4f522ed39e02cf10920cf8b9dfbb560
SSDEEP

12288:x6SKqT31T6WpJY6V765jKqostkm3Nb46/i:gxqT31T6WE6I5jKqosOm9bbi

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

722546aef0a00e2b36b0c8cca5d85b5d70dcbdb44d898510afebeaa7b7fa782e
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 408KB - Virtual size: 407KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE