Nuevo AutoIt v3 Script[.]vxm[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Nuevo AutoIt v3 Script.vxm.exe
Size

2.6MB
MD5

ab5858a874a95d8f247a52bf9bac0a2d
SHA1

82d0ad891e98cfd7911f9486a715d87332ab34ba
SHA256

5abff8a2796897dae80cbcbfd42795fdd2905faca0caeb57022a5b05666ac1c2
SHA512

84611e14d90797a5e5110bf1ce6e32f6b8cc5dc43f17bcf15c3a3a38c456a0deb49e4729fd7953aae8de95f6e3576fad24bb46ea9f0568f42bb63bbdfd7fafec
SSDEEP

49152:yg4AtKrLDQFBbz0h29nusDb/owTZfJBWjxGquwYrp2iyola9DxSH6U:ygvtKrAFRQh29uAb/owTZhBcmwYroPoH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Nuevo AutoIt v3 Script.vxm.exe

Files

Nuevo AutoIt v3 Script.vxm.exe
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.QzKe
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.3NzIS
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ