Malicious
Malicious

Share on LinkedIn
Print
AutoIt Compiled Script
MD5: 2bf5378214ac2132d864a6a04fe94113
Size: 1.2 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 2bf5378214ac2132d864a6a04fe94113
Sha1 eb6a2297a9dbb99ebd8a0f1e4a0da886867e5c7c
Sha256 28fba79b770f7e72c3fcc66aa03497addc3f776f98c80ab1a0d67e90f5d57db0
Sha384 59c624ea26789652e3472834218d8775aa0085613709711948afb4060f3ae51b96babcad826f3ae5101e150ef9c8b0da
Sha512 22eb5ae237cef8ffe4d8f28ba44d852b8d7dfbb8370a399a6ce17160eb05b1b43b73a8a2d169cd1585e082a24c74ba9aab5533ec94fa974e89b0a15bf481b72f
SSDeep 24576:5tb20pkaCqT5TBWgNQ7aYKjSup9Z2E/pZQL6A:KVg5tQ7aYK+M2E25
TLSH 4445CF2273DD8361C3B25273BA25BB41BE7B782506B1F96B2FD4093DF820162525E673
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
PROTEST LETTER 2.exe
Malicious
autCD82.tmp.tok
Malicious
[Cleaned].au3
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
PDB Path PATH
?huhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙