Malicious
Malicious

Share on LinkedIn
Print
AutoIt Compiled Script
MD5: 0ff9aa84af702f3c205993ea4fbe74e3
Size: 1.21 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 0ff9aa84af702f3c205993ea4fbe74e3
Sha1 f21ffcedeea1e89a9053e70fbc9f353aec37e453
Sha256 a0cdffded083ccadb44b6b7841cd16580cf4638a573d2684134181dca7462d3a
Sha384 f23851aa41675e7d36485cf036c43b674d34da678ba81df44c18af57f3189e3681b9e53ec16a6f40df7647ade7425a3f
Sha512 03651e2a87a30192a83e1204803a32af89230d9b392a0f1a79bb368103f586b9d928ca8d0d4e2796d5e8cb5d989693bd06734f97317833663055a986f72cd51b
SSDeep 24576:htb20pkaCqT5TBWgNQ7awKP6aJpuHEF6A:yVg5tQ7awazJSA5
TLSH 2F45CF1273DEC361C7B25273BA157741BEBB782506A1F96B2FD8093DF820122525EA73
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
0ff9aa84af702f3c205993ea4fbe74e3
Malicious
aut8F4B.tmp.tok
Malicious
[Cleaned].au3
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
PDB Path PATH
?huhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙