9455230706[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9455230706.zip
Size

345KB
MD5

925298100f41e2716317a16a5ce0888a
SHA1

602bea93b2cd12031f5a61fe4165f9824195c4d0
SHA256

578a3cf5bb854e51071a0d9450ace536b2477fa302286bb375ef7ea161b88046
SHA512

bcc7a76ba343be31446dd0b409016a5b9df180d760e49239d67db4062bef925940fbc09745d0b8d7fe5abc601b322e4d50361ea781e62edaed6fa4d588a4caeb
SSDEEP

6144:mp8/dYeevZRVm+rKZK6kbNDVJM+OuFzv0K+xjAFgR2lXOzz2hfqQ+:mCVYeev9m+KiNgKGjAgsOUqQ+

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
static1/unpack001/1bbdf6f1176a6949417784ad9863c2881043882cb659bb2299cd6147236b9257	autoit_exe

Files

9455230706.zip
.zip

Password: infected
1bbdf6f1176a6949417784ad9863c2881043882cb659bb2299cd6147236b9257
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.1rdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE