Malicious
Malicious

RUWAIS_LNG_-_SOURCING_1321-1051_EQUIPM[...]ALS.xls

AutoIt Compiled Script
|
MD5: 3ca7593e63faa8deb9f02fa254a96fcb
|
Size: 1.2 MB
|
application/x-dosexec

Print
Infection Chain
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
3ca7593e63faa8deb9f02fa254a96fcb
Sha1
a6acfc4a157edb360e6a12ae62f6333c81d74e3e
Sha256
6ae6baa3e8a078bd4ac1d387d45c3a069caa19b284fd55f22de95cbc47f44221
Sha384
abae3b92ce2e1660bf5e6ddd9c7f8a972933a6ad69b2434dacb7ba1ec6de80066640a004a565fd604013e3d4ea621c3c
Sha512
2af2b8b89d71aaa4a69fb65635d30d4166ffbb273b29e48580986f239faf05e8f600a9a3a0b29c1860443471b25abdcb967916dec6d34cb4be1c09a86cfbf812
SSDeep
24576:Qtb20pkaCqT5TBWgNQ7aPMawt6WDE4jabC1DaJj26A:ZVg5tQ7aPMawphjabC1DaJS5
TLSH
F945C01373DD8361C7B25273BA66B7016EBB782506A1F96B2FD40D3DF920122521EA73

PeID

Microsoft Visual C++ 6.0 DLL (Debug)
Microsoft Visual C++ 7.0 - 8.0
Microsoft Visual C++ 8
Microsoft Visual C++ 8
Microsoft Visual C++ v6.0 DLL
VC8 -> Microsoft Corporation
File Structure
RUWAIS_LNG_-_SOURCING_1321-1051_EQUIPMENT_MATERIALS.xls
Malicious
aut68EA.tmp.tok
Malicious
[Cleaned].au3
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
Artefacts
Name
 Value
PDB Path

????
RUWAIS_LNG_-_SOURCING_1321-1051_EQUIPMENT_MATERIALS.xls (1.2 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙