f6d65611de288d3e5d856b514dc61a275f1c27c7e69d9bd7acc015c14ea3938c | Triage

Sharing

General

Target

f6d65611de288d3e5d856b514dc61a275f1c27c7e69d9bd7acc015c14ea3938c
Size

2.6MB
MD5

6d5dc4090c1edde63e66d718c1d6ecae
SHA1

13974d85b8887cfb02cdf106338e52c4deafa86c
SHA256

f6d65611de288d3e5d856b514dc61a275f1c27c7e69d9bd7acc015c14ea3938c
SHA512

93639f6d63cf478ce5dc3d99d44855ba8ef1be8ecd5608d7ddc78216817940654c36b73e33ed894402432308030420712a286d2a9f338fb52d3e21b5335001b6
SSDEEP

24576:QAHnh+eWsN3skA4RV1Hom2KXSmHdqf0K44JzixdvW80EXLq31gEfUvWDyBFZpxxo:Hh+ZkldoPKiYdqd6Q

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6d65611de288d3e5d856b514dc61a275f1c27c7e69d9bd7acc015c14ea3938c

Files

f6d65611de288d3e5d856b514dc61a275f1c27c7e69d9bd7acc015c14ea3938c
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ