0b0f2d95780bf3f6e8bb6a0d73f878e5fc6883e1e878d6b1d18ec27c041067ff | Triage

Sharing

General

Target

0b0f2d95780bf3f6e8bb6a0d73f878e5fc6883e1e878d6b1d18ec27c041067ff
Size

1.1MB
MD5

3315a90bdc80e348cd8ec472b05846e1
SHA1

94aabb58c50126800c5888502e32bc7c2fe2d1a5
SHA256

0b0f2d95780bf3f6e8bb6a0d73f878e5fc6883e1e878d6b1d18ec27c041067ff
SHA512

40fd2fb98d824ad507f18d68cdd630e109d867d69f2d4dfb58a4ade4328750a087973207a8fe98137a483cb563b9ad76b6d2c28633561db24cbadb669b51ec52
SSDEEP

24576:oAHnh+eWsN3skA4RV1Hom2KXcmtcIaX2qc2tA2/k85:vh+ZkldoPKsacIaFtA2l

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

0b0f2d95780bf3f6e8bb6a0d73f878e5fc6883e1e878d6b1d18ec27c041067ff
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 347KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ