627397908450483ad3f5fe796c26f0845de2866f1a36fd6d8e92ceeb3ef25886 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

627397908450483ad3f5fe796c26f0845de2866f1a36fd6d8e92ceeb3ef25886
Size

1.9MB
MD5

50df3e1587122805d7dbd5925c686fc6
SHA1

2407047ad82a370e82a85c169247a140cda1fb7b
SHA256

627397908450483ad3f5fe796c26f0845de2866f1a36fd6d8e92ceeb3ef25886
SHA512

55de9e6b442b256b00ed05d174b5a7330757d47bed425dec3556b6d01bab1fd9121ae392ecc9c4321bcdd2d3102f79e7ae66dbd509d836d15b69bbfbe863ca24
SSDEEP

24576:fnsJ39LyjbJkQFMhmC+6GD9Ptb20pkaCqT5TBWgNQ7asbmqOy1ApmC06AC:fnsHyjtk2MYC5GDSVg5tQ7asbTp5C

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
627397908450483ad3f5fe796c26f0845de2866f1a36fd6d8e92ceeb3ef25886

Files

627397908450483ad3f5fe796c26f0845de2866f1a36fd6d8e92ceeb3ef25886
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 615KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ