Malicious
Malicious

787d1b476d1775c13e141f9864419ec7

AutoIt Compiled Script
|
MD5: 787d1b476d1775c13e141f9864419ec7
|
Size: 2.19 MB
|
application/x-dosexec

Print
Infection Chain
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
787d1b476d1775c13e141f9864419ec7
Sha1
7cb9e21237bbe642324505cc49a29743bd2a9a37
Sha256
4b0c404625d20207bff29c5c4c1bd31105c130c417943d52c65bd391048d45c7
Sha384
967ae858d162b4f88119cd3f3266290de22cc01e5c0dd40d86594fc4559505ffb9f2a4069f1a1db5123d71caa926a46b
Sha512
792b8d38853b960518d83bda75bde9940aa60e4cb4f4508c8848e8c81fbf8aa75b2d7b9965d93ea70e643fb08492ad3ed1784ada31dd3bfa5045eb0346ae95ee
SSDeep
49152:WjdwIw8gzwfjnO12rLRa0oeZrDQk6NoLtuEqGyUK6S:ywIw8gzwzk2HRa0oeZYkXLEEqnN6S
TLSH
D5A501C2FB941A67D87A5636C5A38E5112366C79D762276B03C8B32A4D072813F73B4F

PeID

Microsoft Visual C++ 8.0 (DLL)
File Structure
787d1b476d1775c13e141f9864419ec7
Malicious
[Authenticode]_0f7ba765.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
AVI
ID:0BB9
ID:1033
RT_ICON
ID:0001
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
RT_DIALOG
ID:07D1
ID:1033
ID:07D2
ID:1033
ID:07D3
ID:1033
ID:07D4
ID:1033
ID:07D5
ID:1033
ID:07D6
ID:1033
RT_STRING
ID:003F
ID:1033
ID:004C
ID:1033
ID:004D
ID:1033
ID:0050
ID:1033
ID:0053
ID:1033
ID:0055
ID:1033
RT_RCDATA
ID:0000
ID:1033
RT_GROUP_CURSOR4
ID:0BB8
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Easter.a3x
Malicious
aut3EE5.tmp.tok
Malicious
[Cleaned].au3
Malicious
AutoIt3.exe
[Authenticode]_2f8fc85c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.fptable
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:2057-preview.png
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:000D
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_DIALOG
ID:03E8
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:1033
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

Authenticode present at 0x214000 size 9768 bytes
Info

PDB Path: wextract.pdb
787d1b476d1775c13e141f9864419ec7 (2.19 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙