118d17e50a52e3ccd7e57297433d443d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

118d17e50a52e3ccd7e57297433d443d
Size

1.0MB
MD5

118d17e50a52e3ccd7e57297433d443d
SHA1

c6f358759faca142e2b3aed8ad97d413b7fdc805
SHA256

fbfcf56007f04ca3647908b8538fc5dc06998f884fa993761638c839a1f499e9
SHA512

f0213066eb439fda7540c84b860ca41c6de813e98af903e2e275d5a7dae1e00909c99af680c5dd4f75647a47ceeb399d5261f604dd233ea431b1edab8bf6a49d
SSDEEP

24576:9AHnh+eWsN3skA4RV1Hom2KXcmtcXP8Q95:ch+ZkldoPKsacXEU

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

118d17e50a52e3ccd7e57297433d443d
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 253KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ