Suspicious
Suspect

AutoIt Compiled Script
MD5: 69aabd18cdd2ce5106faa2f8799a2c63
Size: 2.4 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 69aabd18cdd2ce5106faa2f8799a2c63
Sha1 b091443cf19ad7bd6ae7d7c24a6868d0b5d504f8
Sha256 1dfd42dc5c6a171eb7eb705118ef23d320cbfd4be8d2b0213e1e01fb57a76544
Sha384 9b00364b750c45947c498597320c390af4174af758a2ba4549c1e30b57d228405476bd6e3b4e3b4eb603ca5947fbf532
Sha512 a938ff0d9a7b7dcf58824a49700125a14042b904ade960dc77114eba4075ed8064febb197a5ce00bc1ce3f570a543ece53980cefca8ad4c0fbf7745a307d24e8
SSDeep 49152:FGSbUVAsVo51cZ/M7Y3MCdn5ze5wVQkLl3HZf:FziAsVouM7LCFJe5+LhHZf
TLSH D1B562CF9B98999C97EB04EB3DA90F8CC437665E350767191D7B8CC42128C81F2A77A4
PeID
Microsoft Visual C++ 8
Overlay_e43ece56.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.idata
.rsrc
.reloc
Resources
AVI
ID:0BB9
ID:1033
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
RT_DIALOG
ID:0069
ID:1033
ID:006A
ID:1033
ID:006F
ID:1033
ID:00CD
ID:1033
ID:00CE
ID:1033
ID:00D3
ID:1033
ID:0131
ID:1033
ID:0132
ID:1033
ID:0137
ID:1033
ID:0195
ID:1033
ID:0196
ID:1033
ID:019B
ID:1033
ID:01F9
ID:1033
ID:01FA
ID:1033
ID:01FF
ID:1033
ID:025D
ID:1033
ID:025E
ID:1033
ID:0263
ID:1033
RT_STRING
ID:003F
ID:1033
ID:004C
ID:1033
ID:004D
ID:1033
ID:0050
ID:1033
ID:0053
ID:1033
ID:0055
ID:1033
RT_RCDATA
ID:0000
ID:1033
RT_GROUP_CURSOR4
ID:0BB8
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Scenario.pst
Disclosure.pst
Knowledgestorm.pst
Courses.pst
Depending
Unemployment
Developers
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_e43ece56.bin (815616 bytes)
Info
PDB Path: wextract.pdb
Overlay_e43ece56.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.idata
.rsrc
.reloc
Resources
AVI
ID:0BB9
ID:1033
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
RT_DIALOG
ID:0069
ID:1033
ID:006A
ID:1033
ID:006F
ID:1033
ID:00CD
ID:1033
ID:00CE
ID:1033
ID:00D3
ID:1033
ID:0131
ID:1033
ID:0132
ID:1033
ID:0137
ID:1033
ID:0195
ID:1033
ID:0196
ID:1033
ID:019B
ID:1033
ID:01F9
ID:1033
ID:01FA
ID:1033
ID:01FF
ID:1033
ID:025D
ID:1033
ID:025E
ID:1033
ID:0263
ID:1033
RT_STRING
ID:003F
ID:1033
ID:004C
ID:1033
ID:004D
ID:1033
ID:0050
ID:1033
ID:0053
ID:1033
ID:0055
ID:1033
RT_RCDATA
ID:0000
ID:1033
RT_GROUP_CURSOR4
ID:0BB8
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Scenario.pst
Disclosure.pst
Knowledgestorm.pst
Courses.pst
Depending
Unemployment
Developers
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙