Malicious
Malicious

2fa15046943f621d916f2fa19a80e862

AutoIt Compiled Script
|
MD5: 2fa15046943f621d916f2fa19a80e862
|
Size: 1.46 MB
|
application/x-dosexec

Print
Infection Chain
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
2fa15046943f621d916f2fa19a80e862
Sha1
fc0428c0b581b04b24c128fbbf80c94b7c4d953a
Sha256
9dcab5b0c3b49db4af10f008675ab21c8ceb81e1fe08be23038bf67474fb939c
Sha384
5d3c5196a4ed6fbfbc71f9d0901a4089dba06a1d189a1d6470b3a24177031488b0a3847ad010e6a87c8e72be8628c10e
Sha512
379f6f9bbda93299cb2ce4b27bea635d567c1c2bd11c9cfb8faa809a9db220acce8e03a59a274309b47b71350e13684e874acd017d26a132179e3b44b041926a
SSDeep
24576:S5EmXFtKaL4/oFe5T9yyXYfP1ijXda4yoFUqVymKhucuotBZtlehUXFq9mPu:SPVt/LZeJbInQRa4XYvugBZtMUKm
TLSH
ED65C00273D1C062FFAB91734F5AF6115ABD79260123A62F13A81D79BE701B1463E7A3

PeID

Microsoft Visual C++ 6.0 DLL (Debug)
Microsoft Visual C++ 8
Microsoft Visual C++ 8
Microsoft Visual C++ v6.0 DLL
VC8 -> Microsoft Corporation
File Structure
2fa15046943f621d916f2fa19a80e862
Malicious
aut93CD.tmp.tok
Malicious
[Cleaned].au3
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
2fa15046943f621d916f2fa19a80e862 (1.46 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙