Malicious
Malicious

3c58a7824b09130a77cb1c95f58d3c47

AutoIt Compiled Script
|
MD5: 3c58a7824b09130a77cb1c95f58d3c47
|
Size: 1.28 MB
|
application/x-dosexec

Infection Chain
Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
3c58a7824b09130a77cb1c95f58d3c47
Sha1
83548dbefb98abedd827c3ad4e485c92ff3f1890
Sha256
737150dd64ba95980c71c27ae7319b50018b5b1a5127673949a34214586cf58d
Sha384
8432e42bedbe12cc9125740b79e6ef50bf4ae53e1a3a7eb4a9ddd7e7a1f50d13f715d385fae641c67c6e9d8e9f21d474
Sha512
3e7cbd2d1ede750bbfc7ddcf7949ef3de179c5cc82a0bd9f5185888c3f4ac65a44fe366f08a5df1e0c5ff9e7ded790d94b1d112ac9e0b3c33994c6443952d13f
SSDeep
24576:Mtb20pkaCqT5TBWgNQ7adF0xN/7O9v/Pyt96A:1Vg5tQ7adFUN/s675
TLSH
8D55CF9263DD8264CB7256F37B9577296E7B7C6507E0F45B2FD4093CB8A4021022EAB3

PeID

Microsoft Visual C++ 6.0 DLL (Debug)
Microsoft Visual C++ 7.0 - 8.0
Microsoft Visual C++ 8
Microsoft Visual C++ 8
Microsoft Visual C++ v6.0 DLL
VC8 -> Microsoft Corporation
File Structure
autDB16.tmp.tok
Malicious
[Cleaned].au3
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:2057-preview.png
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
Artefacts
Name
Value
PDB Path

????

3c58a7824b09130a77cb1c95f58d3c47 (1.28 MB)
File Structure
autDB16.tmp.tok
Malicious
[Cleaned].au3
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:2057-preview.png
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
Characteristics
No malware configuration were found at this point.
Artefacts
Name
Value Location
PDB Path

????

3c58a7824b09130a77cb1c95f58d3c47

You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙