1faadab45f64c774977cf84f10bc39ff8589d952fd16d9dee36d918c74a49de2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1faadab45f64c774977cf84f10bc39ff8589d952fd16d9dee36d918c74a49de2
Size

1.0MB
MD5

271a33492b1cbd066ed479f26517771f
SHA1

9689cce6f74b11b31e72463e0ed4bc1e841d7e69
SHA256

1faadab45f64c774977cf84f10bc39ff8589d952fd16d9dee36d918c74a49de2
SHA512

61e7e87a8727e84a5860e63315d85b5ad96b3cf5a71a4074a7b8e62f6857cfc1d8837c05686afd080d5b473896c7e1175fc7afba7aa7b0adb5a3c926ad754c9e
SSDEEP

12288:dtb20Qc3lT7af41ePBRYuQLKpqeUhbTv5OFgNDPPpHrY2TWFbcRSKEPWH1KtX:dtb20pkaCqT5TBWgNjVYOIFKEXtX

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1faadab45f64c774977cf84f10bc39ff8589d952fd16d9dee36d918c74a49de2

Files

1faadab45f64c774977cf84f10bc39ff8589d952fd16d9dee36d918c74a49de2
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 557KB - Virtual size: 557KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ