9ee7b3a347ea267e72b1fd8734196497ee18c85597a42f1b3b7311a8292f710a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ee7b3a347ea267e72b1fd8734196497ee18c85597a42f1b3b7311a8292f710a
Size

977KB
MD5

a2641f570ee3242249d7746661f2a1cb
SHA1

cce513f5956fb952597309d2592b47e1e4e858f6
SHA256

9ee7b3a347ea267e72b1fd8734196497ee18c85597a42f1b3b7311a8292f710a
SHA512

4476ae58c6532ba207ff1f335c34a7387b2a27c57a49b3aefbdc64986a3e7a162860e16f89d66288c5744f614d55c17ddb6e6e5284cf922609093b7ce597d7e7
SSDEEP

24576:EqDEvCTbMWu7rQYlBQcBiT6rpFd+zOX/rKc:ETvC/MTQYxsWPkzOG

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ee7b3a347ea267e72b1fd8734196497ee18c85597a42f1b3b7311a8292f710a

Files

9ee7b3a347ea267e72b1fd8734196497ee18c85597a42f1b3b7311a8292f710a
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 619KB - Virtual size: 618KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ