7f46aec7825c723ea17b62cb8c4772340be5c93cde41fb39f47a94352e308892N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f46aec7825c723ea17b62cb8c4772340be5c93cde41fb39f47a94352e308892N
Size

1.1MB
MD5

84a32ee81da0227ee36c3ecbc74b81e0
SHA1

fcf040fbeaf44af1390de6e63666c5ffa4bb2f7c
SHA256

7f46aec7825c723ea17b62cb8c4772340be5c93cde41fb39f47a94352e308892
SHA512

6bf9065253724448c56cd884e2069a7d1905498d29f945f0913a323b110f8de1e553b8ab8066b4e1764ded8ea4a0ea59ee252b717b80d1106878294fb0843d37
SSDEEP

24576:LCdxteN4RakAU2JbCUL/GbbEExaLQXgk5nbMBGGgNKvQMxpogGGDimqKKFQ9M:Cg4Rak3DU/E4ExacXgk5nbMBGGgNK4MG

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f46aec7825c723ea17b62cb8c4772340be5c93cde41fb39f47a94352e308892N

Files

7f46aec7825c723ea17b62cb8c4772340be5c93cde41fb39f47a94352e308892N
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 567KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 398KB - Virtual size: 397KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ