0de6a336c0feb3bc8b67567dbf3ebf020a9d69df265008cc5017494eb3f549ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0de6a336c0feb3bc8b67567dbf3ebf020a9d69df265008cc5017494eb3f549ca
Size

2.6MB
MD5

8508514f5f41bbf3e1cbd70d71c6714d
SHA1

9e59bca8cdd03bd81f478d5961f2b5089c267ba7
SHA256

0de6a336c0feb3bc8b67567dbf3ebf020a9d69df265008cc5017494eb3f549ca
SHA512

8126a81f2d42a03c6a37614d2ecb3d046ff1050e58ce6956e7084e80571651f983a98efa498027df3ce47713fa11957d260c62145019ba5b3ef285723062af9a
SSDEEP

24576:QAHnh+eWsN3skA4RV1Hom2KXSmHdqf0K44JzixdvW80EXLq31gEfUvWDyBFZpxxu:Hh+ZkldoPKiYdqd62

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0de6a336c0feb3bc8b67567dbf3ebf020a9d69df265008cc5017494eb3f549ca

Files

0de6a336c0feb3bc8b67567dbf3ebf020a9d69df265008cc5017494eb3f549ca
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ