42bb5d89525cf38fe5a39e86d8e734c6c57697c7419c286d51b90f8b3a79c1bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42bb5d89525cf38fe5a39e86d8e734c6c57697c7419c286d51b90f8b3a79c1bb
Size

1.0MB
MD5

0f5a3952d3ea43eb0936f3b724544821
SHA1

59f4b3df633a91d5b9d4dbb7862957e35d433cdb
SHA256

42bb5d89525cf38fe5a39e86d8e734c6c57697c7419c286d51b90f8b3a79c1bb
SHA512

b46f08b03abd660b94482c82b330047aef597515041fdb1314401e0469ab7ae29ab23c2ec6c2c9ea152efd66c4730fa384ffa5e0d923ae2598be9ab3a3e8f2fd
SSDEEP

24576:CqDEvCTbMWu7rQYlBQcBiT6rpFd+zb2c5rkcJ+:CTvC/MTQYxsWPkzbFrkcJ

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42bb5d89525cf38fe5a39e86d8e734c6c57697c7419c286d51b90f8b3a79c1bb

Files

42bb5d89525cf38fe5a39e86d8e734c6c57697c7419c286d51b90f8b3a79c1bb
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 619KB - Virtual size: 618KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ