a7f8f42262cf5dba44dfef6dbdb87e32e844229d29e77c70e37e29cf3786fae6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7f8f42262cf5dba44dfef6dbdb87e32e844229d29e77c70e37e29cf3786fae6
Size

738KB
MD5

de83da242d054f714776581c4efd9ab3
SHA1

14ee6684237807e0ac88ccea2b2ad4820f66fea1
SHA256

a7f8f42262cf5dba44dfef6dbdb87e32e844229d29e77c70e37e29cf3786fae6
SHA512

56bf5869f046caea7766fb5d93e0a51694ec5abb83c081f2f8f0d838428a63ea27accb810342d2fa625a691ee6b97d7ea14b7aa2561b771c12a69333beb17c91
SSDEEP

12288:jLkcoxg7v3qnC11ErwIhh0F4qwUgUnyR8+sMwikgXoX:3fmMv6Ckr7MnyR8+sMw9bX

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

a7f8f42262cf5dba44dfef6dbdb87e32e844229d29e77c70e37e29cf3786fae6
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE