9668155122007cdcf135076d8c51d03069b0a5aa5353503017c717e838d1fa6d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9668155122007cdcf135076d8c51d03069b0a5aa5353503017c717e838d1fa6d
Size

1.0MB
MD5

d67f238a3b3f67579d30716a6001bb7e
SHA1

0db4cf6cbb882b68a1282ec92ac52e1455529103
SHA256

9668155122007cdcf135076d8c51d03069b0a5aa5353503017c717e838d1fa6d
SHA512

67c4df1b9697203d0f1d48abf43a32239915e333e60eda4415b419927ee2841cc7677f49f32f5a1fc2a38588c5ef4c651aa86558963b3d629f4cc61fad9da7f6
SSDEEP

12288:ktb20Qc3lT7af41ePBRYuQLKpqeUhbTv5OFgNDPPpHrYfTGlsXkjf2FC:ktb20pkaCqT5TBWgNjVY7QWFC

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9668155122007cdcf135076d8c51d03069b0a5aa5353503017c717e838d1fa6d

Files

9668155122007cdcf135076d8c51d03069b0a5aa5353503017c717e838d1fa6d
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 557KB - Virtual size: 557KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 237KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ