2c71e5755dff75ee594ca5f3d6edb7bb | Triage

Sharing

General

Target

2c71e5755dff75ee594ca5f3d6edb7bb
Size

843KB
MD5

2c71e5755dff75ee594ca5f3d6edb7bb
SHA1

82930ecea916e90c9d106d6069ab67ac0fb4eb51
SHA256

0bb872e4cbda7ce02d7d8cc6c489e641f0a04c179bf4554f76050833ffefb53d
SHA512

1274e1223e0f05dc3a1f0ea11461303eb7b9806a8cac6ceaa7f80c9a93f5b3656e349889893c46ad6364c0a79d4d8e7b9bac020a8b7fe33f76ed3796b5ad78b6
SSDEEP

12288:i4lsXvtCcmVVXzzn4PJAahPl/QEdIMiVbHydETJnJWkYfF7n:i4lavt0LkLL9IMixoEFNYRn

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c71e5755dff75ee594ca5f3d6edb7bb

Files

2c71e5755dff75ee594ca5f3d6edb7bb
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 560KB - Virtual size: 559KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ