Malicious
Launcher de Fakes.exe
AutoIt Compiled Script
MD5: 7accbd5bef4f2a2b76ad500862a4be11
Size: 685.28 KB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
AutoIt Compiled Script
Size
685.28 KB · 685,284 B
First seen
2026-08-19 20:22 · 2 months ago
Last seen
2026-08-19 20:22 · 2 months ago
Last analysis
2026-08-19 20:23 · 2 months ago
Hashes
MD5
7accbd5bef4f2a2b76ad500862a4be11
Sha1
7777c4586a7e96e654b2a78de67cf00423dd18f6
Sha256
a2db563d7ccc772631e14803cd85a2efc71472d6119b19bcf4cd43e24ab0d676
Sha384
b114cee8faec6d10d6dcca5076016af3b052f29ebe0ba755729e96f0e33c47023346e54357f41cc3a9bb574979317467
Sha512
2074bd188c430b70e7ce1662a66864cfff2dde73dae095b16d618ddc0318a556a84c0e78d2dd7e38f0bef42f2f2c0a86d83ea7d2ba923824ec7d26f8c6ff8ba2
SSDeep
12288:CZjMLf11MmPQeRXEHYYS3gA0FJO1t37nMtDr5qbym8:CafIiy4NwdLTtDAN8
TLSH
E3E4BF02B7C640F6EDA33A741577E32BDB357A185327C98BEFE02E658E111409A39376
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
3 malicious · 23 files
A3XLauncher de Fakes.exe
Structure
A3XOverlay_2d1ed5fb.bin
BINResources
BINRT_ICON
BINID:0001
BINID:2057
BINID:0002
BINID:2057
BINID:0003
BINID:2057
BINID:0004
BINID:2057
BINRT_MENU
BINID:00A6
BINID:2057
BINRT_DIALOG
BINID:03E8
BINID:2057
BINRT_STRING
BINID:0007
BINID:2057
BINID:0008
BINID:2057
BINID:0009
BINID:2057
BINID:000A
BINID:2057
BINID:000B
BINID:2057
BINID:000C
BINID:2057
BINID:0139
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0063
BINID:2057
BINID:00A2
BINID:2057
BINID:00A4
BINID:2057
BINID:00A9
BINID:2057
BINRT_VERSION
BINID:0001
BINID:2057
BINRT_MANIFEST
BINID:0001
BINID:1033
A3XautE245.tmp
A3X[Cleaned].au3
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:autoit
Shape
pe:exe>pe:autoit
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_2d1ed5fb.bin (49380 bytes) |
3 malicious · 23 files
A3XLauncher de Fakes.exe
Structure
A3XOverlay_2d1ed5fb.bin
BINResources
A3XautE245.tmp
A3X[Cleaned].au3
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account