7b0fe96c9bae548d21846c1aa411500f49acf9da8ba1a8cb51cd406a27e91ef6 | Triage

Sharing

General

Target

7b0fe96c9bae548d21846c1aa411500f49acf9da8ba1a8cb51cd406a27e91ef6
Size

1.5MB
MD5

033d38212b9ffb27fa5741b5b65c6592
SHA1

827b00a2b25bdd97dfa268f4d31416c586e1bc00
SHA256

7b0fe96c9bae548d21846c1aa411500f49acf9da8ba1a8cb51cd406a27e91ef6
SHA512

04f2aaaa109d4decabb8e329d57f13a27efb2ddbb24ee59ec22e7a521835ef1fb84de17a4b061ae3df4c07eaa248a2487ab8064b0c101e2a377cd2171dcef0de
SSDEEP

49152:YlZi1szYAs/cYgjQeADK6oNGuqCvkQitEL:0ZXYAsmjQaUbC8Qit0

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b0fe96c9bae548d21846c1aa411500f49acf9da8ba1a8cb51cd406a27e91ef6

Files

7b0fe96c9bae548d21846c1aa411500f49acf9da8ba1a8cb51cd406a27e91ef6
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 568KB - Virtual size: 568KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 766KB - Virtual size: 765KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ