b99928a15e7c212609b2433d7bdbd7f5bbe8264e1288c0ad4ee850fa1b2adf8fN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b99928a15e7c212609b2433d7bdbd7f5bbe8264e1288c0ad4ee850fa1b2adf8fN
Size

1024KB
MD5

ed09f9591349f030d9fa2ae191482320
SHA1

a4301b8d655ac290ebc87706e8b869e53f1f3df6
SHA256

b99928a15e7c212609b2433d7bdbd7f5bbe8264e1288c0ad4ee850fa1b2adf8f
SHA512

a74291e1fdee78d26bd244fb7a66ca184a4cae45c53305866c24cef054dc67b85fdfbfe565a43c22cb80b469bc40aa47b0fca9bb993040cc4ddd9775179505c4
SSDEEP

12288:RqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGUcrYU/e4JdaDgaJTEUJ07:RqDEvCTbMWu7rQYlBQcBihkLG8aNxp6

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b99928a15e7c212609b2433d7bdbd7f5bbe8264e1288c0ad4ee850fa1b2adf8fN

Files

b99928a15e7c212609b2433d7bdbd7f5bbe8264e1288c0ad4ee850fa1b2adf8fN
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 619KB - Virtual size: 618KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 822KB - Virtual size: 821KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ