be4e913692e6b0e109ab56f75c68fc09 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be4e913692e6b0e109ab56f75c68fc09
Size

603KB
MD5

be4e913692e6b0e109ab56f75c68fc09
SHA1

835ceab20da5a653a9ce419401e62cd381bd3669
SHA256

d97e730d8fbb934a767ce730b4e76810c65e141251afd9372f008962d87aff27
SHA512

a05c8b592438aabad8976e8adb140139020052f1fd1e9de4f3be9a29f64a48b2bf54a3b9b3af18d2d1bbbdeb5459d45b7087fb884932eac6db57d47181759247
SSDEEP

6144:1pqoa8aLiC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcAYnCn:1pqiC/2OGAtkCP4cejGSOpRK3C8Rk

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be4e913692e6b0e109ab56f75c68fc09

Files

be4e913692e6b0e109ab56f75c68fc09
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 496KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE