jaffacakes118_Backdoor[.]Win32[.]AutoIt[.]ed[.]020bcbe3bcb1e3ce5a336

General

Target
jaffacakes118_Backdoor.Win32.AutoIt.ed.020bcbe3bcb1e3ce5a336
Size 1.3MB
Sample261015-eql18sxsgs
SHA256 f88b7adafab5c763f03309b4d7ee22a33aab267eacb2edbb120ac2de0df2e707
MD5 d2d0c674c17020bcbe3bcb1e3ce5a336
SHA1 da261161679115daf6bc915f5215f0a3894deab2
SHA512 0f477d7ff338da4e322f6e48e4ea655cfe186d1e82ccba22c8009cd0205ac754b9d8faaffe88d9162c207665b0ccc56fbf919ec6ec6444c2ef0deebb7f2a9cd7
SSDEEP 24576:mu6J33O0c+JY5UZ+XC0kGsoTGc5axUXdISFt7TDulH4:ou0c++OCvkGsEGc5asa8tt
TLSH
T18755BF12B3DD8364CB775133BE2A67016E7B3C694634F45A2ED83D39AAB1171022D7A3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Backdoor.Win32.AutoIt.ed.020bcbe3bcb1e3ce5a336

SHA256 f88b7adafab5c763f03309b4d7ee22a33aab267eacb2edbb120ac2de0df2e707
MD5 d2d0c674c17020bcbe3bcb1e3ce5a336
SHA1 da261161679115daf6bc915f5215f0a3894deab2
SHA512 0f477d7ff338da4e322f6e48e4ea655cfe186d1e82ccba22c8009cd0205ac754b9d8faaffe88d9162c207665b0ccc56fbf919ec6ec6444c2ef0deebb7f2a9cd7
SSDEEP 24576:mu6J33O0c+JY5UZ+XC0kGsoTGc5axUXdISFt7TDulH4:ou0c++OCvkGsEGc5asa8tt
TLSH
T18755BF12B3DD8364CB775133BE2A67016E7B3C694634F45A2ED83D39AAB1171022D7A3
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

5

Entry point

163277

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths