5da1dbb725c25f177486838ca5f437a6

AutoIt Compiled Script
|
MD5: 5da1dbb725c25f177486838ca5f437a6
|
Size: 1.7 MB
|
application/x-dosexec

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	5da1dbb725c25f177486838ca5f437a6
Sha1	0df3188b2be4e4f226e10e0f115a7c2c9f15e921
Sha256	6e9af975a383fd0377d120f73887661d13a9e24933e7ad2903e303b06e3a2571
Sha384	3a14898f60b61bae47bb61b21093ce4b326aba97adfc3f1fa8d3e4c6727ea61ca68a3eb624beb8535f28aaab6e0d977e
Sha512	766ed58f3098baae9eb309db59b8414c07abc4de85c27c1ab5058b50b3633cd59677ed7ba88bc4e2e33499851e16be75e0ac1825734dc0f3318c7afc5761d57e
SSDeep	24576:HLg1zEE0gSrO8Xs6oV5HolTptU67Y3HvpPj+1TdeUuMgbSsV+f1QA8LBc:2tSrzwJolTTUkoBLIJeUuM7s8fuA8V
TLSH	FA75221927C412AAF1B10B3889E3536A17317EA10F61D7AF11447CB53E63BD0AE727DA

PeID

Microsoft Visual C++ 8.0 (DLL)

UPolyX 0.3 -> delikon

File Structure

Informations

Name0	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

Artefacts

Name0	Value
PE Layout	MemoryMapped (process dump suspected)

5da1dbb725c25f177486838ca5f437a6 (1.7 MB)

File Structure

Characteristics

No malware configuration were found at this point.

Artefacts

Name0	Value	Location
PE Layout	MemoryMapped (process dump suspected)	5da1dbb725c25f177486838ca5f437a6 > Resources > RT_RCDATA > ID:0000 > ID:1033 > Steps.exe

You must be signed in to post a comment.