0961bcf0201975810b0bfcc7f5190d8e1ef12119b9dc1969527ca041f29b0c40 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0961bcf0201975810b0bfcc7f5190d8e1ef12119b9dc1969527ca041f29b0c40
Size

1.1MB
MD5

4bb2ab86fd1c86c310d3ee3871c0503e
SHA1

b91e09a00da9ddc63a20f015c580eb891fab005b
SHA256

0961bcf0201975810b0bfcc7f5190d8e1ef12119b9dc1969527ca041f29b0c40
SHA512

4ae6810a9183a24add191ea2a65cb6751f587c8a92b98b6b5f273591b4f7dfd83e98d1bf3f10c92a6939cd22942269a4d7ca04e5906cab8e77347e6061f20968
SSDEEP

24576:4jNefNkgsyIhuc2WNOAFG1x198Qa2dVAmFJuRbAdIW8Nd1:JfNKJOAFMxAQa2dek0RbzP

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0961bcf0201975810b0bfcc7f5190d8e1ef12119b9dc1969527ca041f29b0c40

Files

0961bcf0201975810b0bfcc7f5190d8e1ef12119b9dc1969527ca041f29b0c40
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 381KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ