1e796660e7c038c1d61df779d0476aed[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e796660e7c038c1d61df779d0476aed.bin
Size

906KB
MD5

1e796660e7c038c1d61df779d0476aed
SHA1

a9dfed60cd9d878a99e8d9885edacc457722595b
SHA256

a4df187a1bdb53c9e9da712e1360c749a66b1d9ae21aa51a81a35794effd54d0
SHA512

88142188bb454cc47750fa23c321b55f0fca5b1fa17ed2fe5033a23613e720987b5849e534514a97305263e7a7cc1accc9ef9cddc424a3b72ce357263c569897
SSDEEP

24576:1AHnh+eWsN3skA4RV1Hom2KXcGtc0ir8B:kh+ZkldoPKs6c05

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e796660e7c038c1d61df779d0476aed.bin

Files

1e796660e7c038c1d61df779d0476aed.bin
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ