Malicious
Malicious

1ff457792dcaf69b57124aa5087b90c9

AutoIt Compiled Script
|
MD5: 1ff457792dcaf69b57124aa5087b90c9
|
Size: 1.21 MB
|
application/x-dosexec

Print
Infection Chain
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
1ff457792dcaf69b57124aa5087b90c9
Sha1
1936a233a3074623d6c124943490b3b327ae3c71
Sha256
26d4a6266fb482a80a40807f79118e7e0ce2c2ffe2e7b290460baa64dcd991f5
Sha384
d3e3a004390d3fee7a20cdd7f195b9c4ed76c2870405876ea30652d5df0e77e2576b80d71d6102be72366ced6686a5c2
Sha512
62509a56a78a6966511237d569057de19c37ca9367e22223bbd0c6c91241974c312cbac7610d37da715ce590aaa92eb6aac56b6031796acad3df9d01c6ccfc4c
SSDeep
24576:ptb20pkaCqT5TBWgNQ7anLnVELwwHPrRe2isSvTM3SHJiQUi6A:6Vg5tQ7anLVELwGZSvhiC5
TLSH
9A45C02273DEC361C3B252737A557B01BE7F78250AA5F56B2FD8093DB820122525EA73

PeID

Microsoft Visual C++ 6.0 DLL (Debug)
Microsoft Visual C++ 7.0 - 8.0
Microsoft Visual C++ 8
Microsoft Visual C++ 8
Microsoft Visual C++ v6.0 DLL
UPolyX 0.3 -> delikon
VC8 -> Microsoft Corporation
File Structure
1ff457792dcaf69b57124aa5087b90c9
Malicious
aut76C3.tmp.tok
Malicious
[Cleaned].au3
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
Artefacts
Name
 Value
PDB Path

????
1ff457792dcaf69b57124aa5087b90c9 (1.21 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙