482ef1db0a970cd2ea34f0f11cce11c65e2174a57e8c782b3897198cbb56248d | Triage

Sharing

General

Target

482ef1db0a970cd2ea34f0f11cce11c65e2174a57e8c782b3897198cbb56248d
Size

2.6MB
MD5

1af82d67488f58d6513bd7cadb9e1c79
SHA1

cb6755de89c312fc6b1cd646ffc3ce571c2bd901
SHA256

482ef1db0a970cd2ea34f0f11cce11c65e2174a57e8c782b3897198cbb56248d
SHA512

e9e4b3ec73ad1bc68342601d31e19553f6cc1124385b6116cd70c9ad4ea76973df4094bf84c0075d474acb2f68893272db262921a20886ca89bdabb3464f72d4
SSDEEP

24576:QAHnh+eWsN3skA4RV1Hom2KXSmHdqf0K44JzixdvW80EXLq31gEfUvWDyBFZpxxS:Hh+ZkldoPKiYdqd6a

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
482ef1db0a970cd2ea34f0f11cce11c65e2174a57e8c782b3897198cbb56248d

Files

482ef1db0a970cd2ea34f0f11cce11c65e2174a57e8c782b3897198cbb56248d
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ