Malicious
Malicious

Share on LinkedIn
Print
AutoIt Compiled Script
MD5: 3ca7593e63faa8deb9f02fa254a96fcb
Size: 1.2 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 3ca7593e63faa8deb9f02fa254a96fcb
Sha1 a6acfc4a157edb360e6a12ae62f6333c81d74e3e
Sha256 6ae6baa3e8a078bd4ac1d387d45c3a069caa19b284fd55f22de95cbc47f44221
Sha384 abae3b92ce2e1660bf5e6ddd9c7f8a972933a6ad69b2434dacb7ba1ec6de80066640a004a565fd604013e3d4ea621c3c
Sha512 2af2b8b89d71aaa4a69fb65635d30d4166ffbb273b29e48580986f239faf05e8f600a9a3a0b29c1860443471b25abdcb967916dec6d34cb4be1c09a86cfbf812
SSDeep 24576:Qtb20pkaCqT5TBWgNQ7aPMawt6WDE4jabC1DaJj26A:ZVg5tQ7aPMawphjabC1DaJS5
TLSH F945C01373DD8361C7B25273BA66B7016EBB782506A1F96B2FD40D3DF920122521EA73
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
RUWAIS_LNG_-_SOURCING_1321-1051_EQUIPMENT_MATERIALS.xls
Malicious
aut68EA.tmp.tok
Malicious
[Cleaned].au3
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
PDB Path PATH
?huhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙