Suspicious
Suspect

2af5068f57164b15ab2da10f956f243c

AutoIt Compiled Script
MD5: 2af5068f57164b15ab2da10f956f243c
Size: 1.49 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 2af5068f57164b15ab2da10f956f243c
Sha1 81a299a54ba003b307d84a220c697907bd960b54
Sha256 f667c428b522dde24c5524da99fdf375e3fed0ca92977f0890eb72e21e2178fb
Sha384 6a6a7046dcfa6726eaaad7251e4a77b5f854dc712de7d135e1e8d71df05293d0efcc4c54a56b8ef4bc1f41e5c157903f
Sha512 da761bb422af4fa8df32eaaeacb1b3d14fd0024aeb9bdb68b19a672f38168c65b34e6ae39411fb9cc61f538a16871f8e565f4e4e539cff982de9c0c3b2f33cbf
SSDeep 24576:RVDATV2yrKLfFBWVMSiZxkHGhSPAFvF9um0rhikQWbkC146dRn3sxVCL2Q:R2luLfTDAGsPdBrEkQWt146Uo2Q
TLSH 6E6533D7B4F1DC7AEC5306F8653992095F9E1010F9FAEF27F6D02D207A629610A2D293
PeID
Microsoft Visual C++ v6.0 DLLNullsoft PiMP Stub -> SFX
Overlay_7e755edc.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_DIALOG
ID:0069
ID:1033
ID:006A
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_7e755edc.bin (1072527 bytes)
Overlay_7e755edc.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_DIALOG
ID:0069
ID:1033
ID:006A
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙