3e90fe02e1e1a9aba2dfdfd098d0dca9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e90fe02e1e1a9aba2dfdfd098d0dca9
Size

843KB
MD5

3e90fe02e1e1a9aba2dfdfd098d0dca9
SHA1

fd1ebd25a013a0efe8851ed65f8b9777b75446cd
SHA256

7a300c63a855f82eee8012517296f312e5b2a1a2d5d2b44613e47a5394173352
SHA512

c2ab8e5ffa3d4174cefd71e579c443cc42be4e47d9bea1a239179d539fd590213af709419d9943052a10de56b0e2f76a956529ccce34f7c0567f99987a49ff45
SSDEEP

12288:Q4lsXvtCcmVVXzzn4PJAahPl/QEdIMiVbHydETJnJWkYvB7u:Q4lavt0LkLL9IMixoEFNY1u

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e90fe02e1e1a9aba2dfdfd098d0dca9

Files

3e90fe02e1e1a9aba2dfdfd098d0dca9
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 560KB - Virtual size: 559KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ