Malicious
Malicious

AutoIt Compiled Script
MD5: 1937fb5bd932b6b9ed707d764c567f27
Size: 1.19 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 1937fb5bd932b6b9ed707d764c567f27
Sha1 932b15bd3f1b86ccd1876290ae22e4bfdae97c85
Sha256 5a13dd5d13e094fa6d10b545dd72855d21143c478ebb5bb589f7334767cd4d34
Sha384 8383c7c71cb3e49635d8b7e7880e73332c5c199b48805c23da1e4ceeccebba7075b402ca509275184014a6c608493af2
Sha512 b8931cc286eb4f7686408dec60181a563776d514a5b851462e6ede1c02ae06cec944bb1442c9d200e68c073eff62d428d83790bb2c9bdc8b3dde5edf629b6f78
SSDeep 24576:Otb20pkaCqT5TBWgNQ7aKtJM4bC+GjfiFCnb6A:7Vg5tQ7aKlZkeCb5
TLSH 3E45CF1363DE8361C3725273BA257701AEBF782506A1F96B2FD8093DF920162525EB73
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
autBC66.tmp.tok
Malicious
[Cleaned].au3
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: ????
autBC66.tmp.tok
Malicious
[Cleaned].au3
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙