8a48d2b554c5e153f121be781ad294ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a48d2b554c5e153f121be781ad294ce
Size

1.0MB
MD5

8a48d2b554c5e153f121be781ad294ce
SHA1

0099c454bda9d01898d74749b2eee4512508a2db
SHA256

c644347db9da00be53407bf242789746c425eb6a93ea8efe4329afc26f5864fe
SHA512

f2b1364fb9119db564aa85c341dbd6839e6820c02812ec5ce38ff1967a18ee43f19434eefaa4836a2328a1553e66525f5de38784967b336ec1991eb44bed5bfa
SSDEEP

6144:w/8JeJfEuGs8k/bUlgq+xpJDHCq17WSTLp980sbpy3KR/ie5bBb2Y+NH:dJeJfEuGstgg0kjp98zHpie5toH

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a48d2b554c5e153f121be781ad294ce

Files

8a48d2b554c5e153f121be781ad294ce
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.penask
Size: 414KB - Virtual size: 414KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ