fb81a77464f884bb76dd2fad3e915e62 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb81a77464f884bb76dd2fad3e915e62
Size

635KB
MD5

fb81a77464f884bb76dd2fad3e915e62
SHA1

10b7c84909d773ff9e32af0a20ac58769d3a69ed
SHA256

2f1fa1156ac2dbfa21d5dda90b768ae7398b1198685576df318d6d162cec2fb4
SHA512

af296134c14d852891de319f473b9b288950198cc376504e3d53c84e6792762b9b8a16a9dd3a3e69b203bd20f64d1fce3a9e26ed60fa2e5a7e66d14996453357
SSDEEP

12288:UaWzgMg7v3qnCiMErQohh0F4CCJ8lnyi8e:LaHMv6Corjqnyi8e

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb81a77464f884bb76dd2fad3e915e62

Files

fb81a77464f884bb76dd2fad3e915e62
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ