Malicious
Malicious

0ffd6f8b8a48276f32aaf1ccc718a047

AutoIt Compiled Script
MD5: 0ffd6f8b8a48276f32aaf1ccc718a047
Size: 670.21 KB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 0ffd6f8b8a48276f32aaf1ccc718a047
Sha1 da2c212028eac477a0ab1b01f39c8cbde51d3c4d
Sha256 df9502fc78b10ee6ab0664a06591f98d5dfcbb2984fe1345d43c2cdfabd3d9c3
Sha384 931e421b2f0afe12eab7abc0513447274f85d9ad3c2d019391c48da6bd1dfc93ba37e6e9b3f9105ebdf703929cdf2bc2
Sha512 6d995ad99a0dad82e0ddea5b33ca5e5b114bd2b8b308d0f25e63d7379da72be9a67e814d15218c76c13f916b18a6e3f7590c53f6d644afb4ae342b28a8bfd5cd
SSDeep 12288:kOv5jKhsfoPA+yeVKUCUxP4C902bdRtJJPiM5stc8Qt8xHbDapPCI6HtjdO8xP:kq5TfcdHj4fmbLstGC7DaKHHO8xP
TLSH C0E42350A4D4CC31EBD13331D0BBDEA12564BC72CD85671D9BD9F58E7831A83A982B2E
PeID
Microsoft Visual C++ v6.0 DLLPacker=UPX Compresor..Gratuito... www.upx.sourceforge.netUPX -> www.upx.sourceforge.netUPX Modified >> *$igBy Ahmed18UPX v0.89.6 - v1.02 / v1.05 -v1.24 -> Markus & Laszlo (overlay)]UPX v1.25 (Delphi) StubUPX v3.0
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
.rsrc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
autB866.tmp.tok
Malicious
[Cleaned].au3
Malicious
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
.rsrc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
autB866.tmp.tok
Malicious
[Cleaned].au3
Malicious
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙