Malicious
Malicious

AutoIt Compiled Script
MD5: 27a0d7a58c1d4dfabbc600ac8aa1de8d
Size: 1.17 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 27a0d7a58c1d4dfabbc600ac8aa1de8d
Sha1 92a6cc38485b2e840cbeef546228d89df4b13c8b
Sha256 41a7ea4325b76d7cf721b86c2cf60ccb0ee2b9773be7ba8aa2763ebf18335805
Sha384 b73e9f6e7834c0537e5b8842c9d51b792093fa8ff64c9ce6e4633975ceca639a045601398e3d040c077b92f013a27213
Sha512 3966bc1f2a487bce1eebcd8d51293ed992e0911228ddf5ec1989f7def0de449dc6dbbb3c01bf5112da5e4be0e8742ef7413fdcd929272ef44b10f0185935d423
SSDeep 24576:Df+iN57Gtene3Hr/01S+jKDl+Pgn87DLMVqFIYPMk:7LXKtene3LMtYl+Pgn87DLM3Y
TLSH 2F45E0053745DF14C51F55B2C8A3C2F8532B7E40DD009BDB76D9FE2A78B22EA6A62087
PeID
Microsoft Visual C++ v6.0 DLLUPX -> www.upx.sourceforge.netUPX Modified >> *$igBy Ahmed18UPX Protector v1.0xUPX v0.89.6 - v1.02 / v1.05 -v1.24 -> Markus & Laszlo (overlay)]UPX v1.25 (Delphi) StubUPX v3.0
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
.rsrc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
aut42CF.tmp.tok
Malicious
[Cleaned].au3
Malicious
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
.rsrc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
aut42CF.tmp.tok
Malicious
[Cleaned].au3
Malicious
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙