c455c82fb461dcfc46384c8359f00f88b8333a022b2b467292f99d9cfd77b58d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c455c82fb461dcfc46384c8359f00f88b8333a022b2b467292f99d9cfd77b58d
Size

1.2MB
MD5

23b7aa811426b694a8375b364327168c
SHA1

77abe6331a34d46f1b865019161c9b7fe27f60fa
SHA256

c455c82fb461dcfc46384c8359f00f88b8333a022b2b467292f99d9cfd77b58d
SHA512

4c29e230bf1c5308ab556c81ecfc48990e703a578feae5c24fda7ff6880997107a29100b4c6f6cdfc2263e0a63f2cd5586bc0ee91451ad60d4a7e2b80dc83705
SSDEEP

24576:CAHnh+eWsN3skA4RV1Hom2KXcmtcRG/UdJ9z6LcD5:Fh+ZkldoPKsacRmUdJ9zF

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c455c82fb461dcfc46384c8359f00f88b8333a022b2b467292f99d9cfd77b58d

Files

c455c82fb461dcfc46384c8359f00f88b8333a022b2b467292f99d9cfd77b58d
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 470KB - Virtual size: 469KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ