4a21e2603af4fd45f425162ab2452c57 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a21e2603af4fd45f425162ab2452c57
Size

885KB
MD5

4a21e2603af4fd45f425162ab2452c57
SHA1

b3b7eecf857a146e93e83fbe660e6355cf1fb98f
SHA256

cd0f500ff1c73a4fb264568abd6fbf0e8ab21a1fa88565005f7f17384b88f0ec
SHA512

2d74c8fa31d31004c9fd6b04d1213c72dd49a1cdf4f09988f7a9644cf9f5a1910f196f3b1f5ccf9072a4c1ba1c338cf4143ce6784f05cde1dabc8bdeb677456c
SSDEEP

12288:J4lsXvtCcmVVXzzn4PJAahPl/QEdIMiVbHydETJnJWkYdwr:J4lavt0LkLL9IMixoEFNYdwr

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a21e2603af4fd45f425162ab2452c57

Files

4a21e2603af4fd45f425162ab2452c57
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 560KB - Virtual size: 559KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ