Malicious
Malicious

AutoIt Compiled Script
MD5: 85b36b0c39a10d9172d47a4139f9f73a
Size: 1.18 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 85b36b0c39a10d9172d47a4139f9f73a
Sha1 4cc816436fa17fb23acc74f1af0e41242edec82b
Sha256 47acf5740f6fc8c8cb2c3156aae544b88bae5f06bd623cc4eef8b3c753113716
Sha384 79300507583b4eef9196221b958907030002271fb1002931f8e1db5af8e1fe73573b2976fade240c2da7d1755cb62f3b
Sha512 800698e70becd2674274b56954c081c1a33c20646770b001e670234369d7a30572f8a1842a88a50a63178f07e2e87a5ea8f46c3e8192252933102cde0dfd2dfe
SSDeep 24576:If+iN57Gtene3HduVUIhQXBxTBzg5Ofzj:+LXKtene39OUxXBbM5W
TLSH FD45F0027784DF11C51F15B5C8A2C2F8532BBE00DD056BDB76C9FF1A78F22AA6A61493
PeID
Microsoft Visual C++ v6.0 DLLUPX -> www.upx.sourceforge.netUPX Modified >> *$igBy Ahmed18UPX Protector v1.0xUPX v0.89.6 - v1.02 / v1.05 -v1.24 -> Markus & Laszlo (overlay)]UPX v1.25 (Delphi) StubUPX v3.0
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
.rsrc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
aut5D13.tmp.tok
Malicious
[Cleaned].au3
Malicious
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
.rsrc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
aut5D13.tmp.tok
Malicious
[Cleaned].au3
Malicious
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙