f00a149191cfe91e71d215317fa2d699c85f56c9eecbda9a7ddb55b07bc4df5e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f00a149191cfe91e71d215317fa2d699c85f56c9eecbda9a7ddb55b07bc4df5e
Size

2.6MB
MD5

e2c7d8b9a15297411f1d1bd5f7632b5a
SHA1

b5d918bae4d15bc8e492931a94629d82c1adeb33
SHA256

f00a149191cfe91e71d215317fa2d699c85f56c9eecbda9a7ddb55b07bc4df5e
SHA512

b7280cb63fe5b027e10b42f8ca7808a3a62362138dc05bcb3a17692fb5abb07de10c2f1d289919da0567fb6fad26d6309529acc181d72e9a512f69c58ea4a863
SSDEEP

24576:QAHnh+eWsN3skA4RV1Hom2KXSmHdqf0K44JzixdvW80EXLq31gEfUvWDyBFZpxxb:Hh+ZkldoPKiYdqd6D

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f00a149191cfe91e71d215317fa2d699c85f56c9eecbda9a7ddb55b07bc4df5e

Files

f00a149191cfe91e71d215317fa2d699c85f56c9eecbda9a7ddb55b07bc4df5e
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ