Malicious
Malicious

54e3349ae3a617ff00c6dedfb4676afe.Invoi[...]427.exe

AutoIt Compiled Script
|
MD5: 54e3349ae3a617ff00c6dedfb4676afe
|
Size: 1.01 MB
|
application/x-dosexec

Print
Infection Chain
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
54e3349ae3a617ff00c6dedfb4676afe
Sha1
c90ec51599cba15980be0d8de3dc4a5d74773ad3
Sha256
c53170393e7825648709b042f54ff764a4228f38b31ecf29b7e7d971b4e42b56
Sha384
2144bbefda2b911449b9254debe1d29ac5a2795e121aa4399d5905fb87f4a131a0fc1544eb2649f4e4c0b6ce2b8408c2
Sha512
cba904b11c586b37953f4d2291d7cfa8a9ee4c266c09f118e96c14bf903f882e4b066f6b2dc8f168bc9b7d61f56d865d1ecdf564d9bef8eb3c773132e45a2d4c
SSDeep
24576:2tb20pkaCqT5TBWgNQ7aGK458jfPuPyFlj6A:jVg5tQ7aGz5IfPuKFh5
TLSH
E125BF1363DE8361C3B25273BA25B741BEBF782506A1F56B2FD8093DE920122525E773

PeID

Microsoft Visual C++ 6.0 DLL (Debug)
Microsoft Visual C++ 7.0 - 8.0
Microsoft Visual C++ 8
Microsoft Visual C++ 8
Microsoft Visual C++ v6.0 DLL
VC8 -> Microsoft Corporation
File Structure
54e3349ae3a617ff00c6dedfb4676afe.Invoice for PO#7311104164 OC#168427.exe
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
aut1F5B.tmp.tok
Malicious
[Cleaned].au3
Malicious
54e3349ae3a617ff00c6dedfb4676afe.Invoice for PO#7311104164 OC#168427.exe (1.01 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙