Malicious
19797642afaf97f9a789ea1100ab2aa9
AutoIt Compiled Script | MD5: 19797642afaf97f9a789ea1100ab2aa9 | Size: 1.19 MB | application/x-dosexec
AutoIt Compiled Script
MD5: 19797642afaf97f9a789ea1100ab2aa9
Size: 1.19 MB
application/x-dosexec
Infection Chain
Summary by MalvaGPT
Characteristics
|
Hash | Hash Value |
|---|---|
| MD5 | 19797642afaf97f9a789ea1100ab2aa9
|
| Sha1 | 11e9e8ec217f02c25710cb592a78e0c9d74dbca7
|
| Sha256 | 2517ed2b2525424d095280b32a99a2d3ead88aa2b8d8e34eb65da2e64dac3c90
|
| Sha384 | a752cf59e99f303bf482a2237690ec34dcdbf332d7f5839640d22ed391277fee9bd5e631e95aca33b8884da2af4e3a6e
|
| Sha512 | 87a8163d88542c164af8ba2cd5cf7419a3a1a270643a9271d0f4308d220fe5889a76957718dc616d636c18b55b517592e5b6a398cae4d3082076506cdb203beb
|
| SSDeep | 24576:Btb20pkaCqT5TBWgNQ7aSDlnKQyXWqRREBLrV6A:SVg5tQ7aS5nK/GqRo5
|
| TLSH | 1C45C01363DD8361C7B25273BA25B701BEBF7C2506A5F96B2FD4093DB920122521EA73
|
PeID
Microsoft Visual C++ 6.0 DLL (Debug)
Microsoft Visual C++ 7.0 - 8.0
Microsoft Visual C++ 8
Microsoft Visual C++ 8
Microsoft Visual C++ v6.0 DLL
VC8 -> Microsoft Corporation
File Structure
19797642afaf97f9a789ea1100ab2aa9
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
Artefacts
|
Name0 | Value |
|---|---|
| PDB Path | ???? |
19797642afaf97f9a789ea1100ab2aa9 (1.19 MB)
File Structure
19797642afaf97f9a789ea1100ab2aa9
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
Characteristics
No malware configuration were found at this point.
Artefacts
|
Name0 | Value | Location |
|---|---|---|
| PDB Path | ???? |
19797642afaf97f9a789ea1100ab2aa9 |
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.