9cc5ab278524fcf8d2374c16e6517f9e2f1c36de0f4c994d870a4f288dd265ac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9cc5ab278524fcf8d2374c16e6517f9e2f1c36de0f4c994d870a4f288dd265ac
Size

3.6MB
MD5

f84df8a40cb90e4758b05405613abbdd
SHA1

c756f49e708bedfff37ea4e6f6a8316bdd82d73f
SHA256

9cc5ab278524fcf8d2374c16e6517f9e2f1c36de0f4c994d870a4f288dd265ac
SHA512

c5fc3b20fa9d09d3865fe5d06f39acdf37dbadad69724c42331a24aaff03841b5cfd640eef0d45efd886c24b50291fd80266a232309f0e146d2edcc821ba3a43
SSDEEP

49152:uw80cTsjPRcYEhY1/Va4rHwPxubcnLL0zhGLJmrCNGSIC10rSd737QziNCRLawpj:T8sjPRaGgx+cnLL0zqMON/ZEziNcLr

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9cc5ab278524fcf8d2374c16e6517f9e2f1c36de0f4c994d870a4f288dd265ac

Files

9cc5ab278524fcf8d2374c16e6517f9e2f1c36de0f4c994d870a4f288dd265ac
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 567KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ