Malicious
AutoIt Compiled Script
MD5: 3eecc99ccb62963d751012bc1fef17ff
Size: 1.19 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
This sample is a 1.1 MB AutoIt Compiled Script classified as malicious by Malva.RE. Static analysis extracted 21 embedded or derived files. It matches 6 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 9080195eb1efe6670b12033b8df3e27a9acf24a14fc51af4cb577590bbca7afa
- MD5
- 3eecc99ccb62963d751012bc1fef17ff
- Verdict
- Malicious
- File type
- AutoIt Compiled Script · 1.1 MB
Cite this report: https://app.malva.re/sha256/9080195eb1efe6670b12033b8df3e27a9acf24a14fc51af4cb577590bbca7afa
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
AutoIt Compiled Script
Size
1.19 MB · 1,186,816 B
First seen
2025-12-08 16:16 · 10 months ago
Last seen
2025-12-08 16:16 · 10 months ago
Last analysis
2025-12-08 19:17 · 10 months ago
Hashes
MD5
3eecc99ccb62963d751012bc1fef17ff
Sha1
3f264a7961adc4be06ccb5d4581724d78e16450a
Sha256
9080195eb1efe6670b12033b8df3e27a9acf24a14fc51af4cb577590bbca7afa
Sha384
9f16686c0fc16e79b3a2c47d73fc3848874af8cea7b4fb88a6aca51f435e0b17cc7289dd52d582bc9a4234ee34a5a8af
Sha512
1c642d3052a54aaf9427416a5bebe1dce3dabf3c89f9faa072b43770a5c97cd86ab0d23d12ad7c8174ff307cc137d3405b205bade26c3ee8c825a97387d70275
SSDeep
24576:O5EmXFtKaL4/oFe5T9yyXYfP1ijXdaSKbCGJC178x4AfF:OPVt/LZeJbInQRaSKbvo172
TLSH
3245BF027381D062FF9B91334F5AF6125BBC6A260123E61F13981DB9BE705B1563E7A3
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
3 malicious · 22 files
A3X3eecc99ccb62963d751012bc1fef17ff
Structure
A3XautFEE6.tmp.tok
A3X[Cleaned].au3
BINResources
BINRT_ICON
BINID:0001
BINID:2057
BINID:0002
BINID:2057
BINID:0003
BINID:2057
BINID:0004
BINID:2057
BINRT_MENU
BINID:00A6
BINID:2057
BINRT_STRING
BINID:0007
BINID:2057
BINID:0008
BINID:2057
BINID:0009
BINID:2057
BINID:000A
BINID:2057
BINID:000B
BINID:2057
BINID:000C
BINID:2057
BINID:0139
BINID:2057
BINRT_RCDATA
BINID:0000
A3XID:0
BINRT_GROUP_CURSOR4
BINID:0063
BINID:2057
BINID:00A2
BINID:2057
BINID:00A4
BINID:2057
BINID:00A9
BINID:2057
BINRT_VERSION
BINID:0001
BINID:2057
BINRT_MANIFEST
BINID:0001
BINID:2057
| Name | Value |
|---|---|
| Info | PDB Path: t$di |
3 malicious · 22 files
A3X3eecc99ccb62963d751012bc1fef17ff
Structure
A3XautFEE6.tmp.tok
A3X[Cleaned].au3
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account