Malicious
Malicious

AutoIt Compiled Script
MD5: 390d93b3499ad9f549745649d5ac735a
Size: 866.82 KB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 390d93b3499ad9f549745649d5ac735a
Sha1 8ae54c2fcebf5af8af5f50117a09f1c7a7d84497
Sha256 02f63cc487c184315612a286990150d9193d8dd1024e930fc289f90a92fbcf00
Sha384 f5f1c94dc7d818da8abb920ef99bbef6f308cf48753ecfd2f46cedb3e09adb08e969f33bd364c32d1a9c6d2d54f65a4a
Sha512 66e3adb8a4db85f3afe267ea807fb7f49f385ba19689a9aa8f165682c7fc46b6ad30ede25bfb695a09742226546d87bc25042e0ca9f16ff6b271c0bb4ada2fdb
SSDeep 12288:WOv5jKhsfoPA+yeVKUCUxP4C902bdRtJJPi/w/H67QnM5FVjULiB6PlahJSGX:Wq5TfcdHj4fmbB/H67QnMljULiB+gS0
TLSH CC05AC2B6432529DDBDD25304F4D72A90983AF20989F3688F477F905F232973366D86E
PeID
Microsoft Visual C++ v6.0 DLLUPX -> www.upx.sourceforge.netUPX Modified >> *$igBy Ahmed18UPX v0.89.6 - v1.02 / v1.05 -v1.24 -> Markus & Laszlo (overlay)]UPX v1.25 (Delphi) StubUPX v3.0
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
.rsrc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:2057-preview.png
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
RT_STRING
ID:0007
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
autF7EC.tmp.tok
Malicious
[Cleaned].au3
Malicious
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
.rsrc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:2057-preview.png
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
RT_STRING
ID:0007
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
autF7EC.tmp.tok
Malicious
[Cleaned].au3
Malicious
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙