Malicious
Malicious

1aefcbbc1ea725bd40e7dbcb62d53b79

AutoIt Compiled Script
|
MD5: 1aefcbbc1ea725bd40e7dbcb62d53b79
|
Size: 718.34 KB
|
application/x-dosexec

Print
Infection Chain
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
1aefcbbc1ea725bd40e7dbcb62d53b79
Sha1
1df40e535cd00db0cb356c65d67fab8f9369fc29
Sha256
f626061c6431a018a00e7f4bf29904f1d4fe9fe093a5fe7fdcca08d0aaead56c
Sha384
1b887603fa9fcd19ebfe811b52f586c947d068cf3864fbdf0eec7827376a74b1431f96c32345342729077b71479359a6
Sha512
901eed02df44527646603e1473ed98585cca4c250488de50358d33ca432ffeee33ed176ea8f4943f37a9cf172ed44f55ffce83738b3fa6df07b1a8c5b6add688
SSDeep
12288:Qz7hU5I5yuNHIgzSFKxWltRohBfSTso93Uq2FmEEnNJ5f+sEO5Vsakasvnoi9Kvv:Qf+iN57Gtene3tkmNJ1+sFtwPo2fpu
TLSH
13E42385AD92A050D1B4B330C836CC948E393A729D19773F9339E25BACB1393D96778D

PeID

Microsoft Visual C++ v6.0 DLL
Packer=UPX Compresor..Gratuito... www.upx.sourceforge.net
UPX -> www.upx.sourceforge.net
UPX Modified >> *$igBy Ahmed18
UPX v0.89.6 - v1.02 / v1.05 -v1.24 -> Markus & Laszlo (overlay)]
UPX v1.25 (Delphi) Stub
UPX v3.0
File Structure
1aefcbbc1ea725bd40e7dbcb62d53b79
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
.rsrc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_STRING
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
aut14DE.tmp.tok
Malicious
[Cleaned].au3
Malicious
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
1aefcbbc1ea725bd40e7dbcb62d53b79 (718.34 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙