Suspicious
Suspect

4f64b910fb59485226513e175511ffbb

AutoIt Compiled Script
MD5: 4f64b910fb59485226513e175511ffbb
Size: 1.09 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 4f64b910fb59485226513e175511ffbb
Sha1 c15cf6c52893028b072e1d52e209d6e119909f14
Sha256 f3320e52f9ff893c6cbf220d7f4a9dddfdaaad64c1d60b7b267d22d7a078def1
Sha384 d66bcc7d274752d1f69638feabd8af9838e817dd620a5f86fcfebd2e8aca9465d37ff3a92904b78c82f72a30eabe4523
Sha512 18e64515b4d941b75d5fc1600463b516cc27c3768c4e63486df9f336520382cad993da04c2dfd24e763c79cf45f7d2a2f683478028aff4c04727a772700cecdd
SSDeep 24576:XzZqdzwO4sBtOeeuyNM5gclrfWaK0X77CnhlmQER1x3kRSlG:X0VBtY38BPCpG5lG
TLSH 6B3523807D22EA6FD7D00BB257140944EF799C3148692BEB86D51D9A7DB02C1CF6CBE2
PeID
Microsoft Visual C++ v6.0 DLLNullsoft PiMP Stub -> SFX
Institutional.swf
Bahrain.swf
Translation.swf
Promising.swf
Regard.swf
Catholic.swf
Relevance.swf
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.reloc
[SETUP_DECOMPILED.NSI]
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
RT_DIALOG
ID:0069
ID:1033
ID:006A
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Institutional.swf
Bahrain.swf
Translation.swf
Promising.swf
Regard.swf
Catholic.swf
Relevance.swf
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.reloc
[SETUP_DECOMPILED.NSI]
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
RT_DIALOG
ID:0069
ID:1033
ID:006A
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙