52432ce17da4bb8f5b497c37aedcd4e0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52432ce17da4bb8f5b497c37aedcd4e0N.exe
Size

1024KB
MD5

52432ce17da4bb8f5b497c37aedcd4e0
SHA1

bdd682e81d17dda55e34edaeb04e76f39ff8dce1
SHA256

802f5a07a6ac45b6e8c10453da329cd074abaf6379a776e6d3258e7fca1b036f
SHA512

d51f015c43556536bd507e67e2fe23da26385d45e20ede22cfeddacb8a8b907ad514931f7566e16e47dc5b2400d564dda09c19464ecbde24e94dac9e804ac0e2
SSDEEP

24576:bAHnhHQTpuytyBZ6A6wiHaZ7j8tmxhW5p:2hHoUygGAdUaZ7j8tL

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52432ce17da4bb8f5b497c37aedcd4e0N.exe

Files

52432ce17da4bb8f5b497c37aedcd4e0N.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 326KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ