97d49215387c7a7ed932ac7221be4a2e75debef5a4399ba06473a93a28298193 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97d49215387c7a7ed932ac7221be4a2e75debef5a4399ba06473a93a28298193
Size

960KB
MD5

f1eda90b4cd46b5db680903940d59cc6
SHA1

eb5129af1bd951a87f01f5f85a4281f19de2071f
SHA256

97d49215387c7a7ed932ac7221be4a2e75debef5a4399ba06473a93a28298193
SHA512

6c8392a806ba015de3aeec45ec141a088376f509e0eab53815d4faa9a9af33508299d7d34a8dc1d2cc7d5130f03fa59dfb1f4a1ccef6644daad8f91772ca782d
SSDEEP

24576:7qDEvCTbMWu7r5kvP28f3CeosV1OqVYG8aHy2rgz0E:7TvC/MTqe8fS57aHy2rgz0E

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97d49215387c7a7ed932ac7221be4a2e75debef5a4399ba06473a93a28298193

Files

97d49215387c7a7ed932ac7221be4a2e75debef5a4399ba06473a93a28298193
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 619KB - Virtual size: 618KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 390KB - Virtual size: 389KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ