a99564646beafac0d8e76432a44d939bb9359d8f2ea9d26a95da418e540a37e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a99564646beafac0d8e76432a44d939bb9359d8f2ea9d26a95da418e540a37e0
Size

1.3MB
MD5

70896e9c5e2273b2fdedcd2cdca07e3a
SHA1

a77653f91c8a7630522672bbc82e2d0941c5f288
SHA256

a99564646beafac0d8e76432a44d939bb9359d8f2ea9d26a95da418e540a37e0
SHA512

52adb87513990cf0663e6d13037892b6b44e7b6b3f19bc5355937fd573a2f6753e4cec6819cf4b579e76c8a8593649aaa4910769669e1becdeeaaf75d9c6c24d
SSDEEP

24576:SqDEvCTbMWu7rQYlBQcBiT6rpFd+zl8OsVtA7nm+ff:STvC/MTQYxsWPkzlBsPA7m

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a99564646beafac0d8e76432a44d939bb9359d8f2ea9d26a95da418e540a37e0

Files

a99564646beafac0d8e76432a44d939bb9359d8f2ea9d26a95da418e540a37e0
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 619KB - Virtual size: 618KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 435KB - Virtual size: 435KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ