e6d40a6f82749c5b356f3dff53a65bb907df9884efb984bedb3fb643770fd13c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e6d40a6f82749c5b356f3dff53a65bb907df9884efb984bedb3fb643770fd13c
Size

2.6MB
MD5

8d6f7c09fc5a5d66102abcd185da9649
SHA1

19a87c7362830a542be21c31c1b4af03f97e06b4
SHA256

e6d40a6f82749c5b356f3dff53a65bb907df9884efb984bedb3fb643770fd13c
SHA512

670203dba2459ac1236ccedcd84d34956d90576528a972c0f729487f1e6bbb9e08f66c689dff7b529fe770a8b32d999cc1137ef9eed811a0e30145f2a3be8f0a
SSDEEP

24576:QAHnh+eWsN3skA4RV1Hom2KXSmHdqf0K44JzixdvW80EXLq31gEfUvWDyBFZpxxw:Hh+ZkldoPKiYdqd64

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e6d40a6f82749c5b356f3dff53a65bb907df9884efb984bedb3fb643770fd13c

Files

e6d40a6f82749c5b356f3dff53a65bb907df9884efb984bedb3fb643770fd13c
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ