Malicious
Malicious

3a4b22482d0b721bc575dec6ac990e02

AutoIt Compiled Script
|
MD5: 3a4b22482d0b721bc575dec6ac990e02
|
Size: 580.61 KB
|
application/x-dosexec

Infection Chain
Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
3a4b22482d0b721bc575dec6ac990e02
Sha1
8d7384ce0a006f95010c9a2a067a2fd28b5d796d
Sha256
db2271f6304ac6140d219a6a092c757e07dbe0fc342d62b9ba83dc7e0f005cda
Sha384
4b0570fd02b210ff4ef93287494900cf7f9d23db5c380de094993756e1148f05f3b0cdf00355470c47782bc676dc7806
Sha512
89bf2652870bb1ad9bdf8d90cb1509e3e23d36fe32b138da538902031c4d7a5b4c5cf2f6411b562e5b383f4e3462692f549ca58479ca8d2467a7f48f806b0438
SSDeep
12288:Iz7hU5I5yuNHIgzSFKxWltRohBfSTso93Ue/IF/rWmUKY:If+iN57Gtene3LEWmUKY
TLSH
24C4128A99D19E90C2146731C836CC1488353871EE5AB36EC71AF5AB7C70383EEA775D

PeID

Microsoft Visual C++ v6.0 DLL
Packer=UPX Compresor..Gratuito... www.upx.sourceforge.net
UPX -> www.upx.sourceforge.net
UPX v1.25 (Delphi) Stub
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
.rsrc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
aut3C50.tmp.tok
Malicious
[Cleaned].au3
Malicious
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

3a4b22482d0b721bc575dec6ac990e02 (580.61 KB)
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
.rsrc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
aut3C50.tmp.tok
Malicious
[Cleaned].au3
Malicious
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙