Malicious
89a5f0f00f392a88d243a06f3bb5fda8
AutoIt Compiled Script | MD5: 89a5f0f00f392a88d243a06f3bb5fda8 | Size: 931.33 KB | application/x-dosexec
AutoIt Compiled Script
MD5: 89a5f0f00f392a88d243a06f3bb5fda8
Size: 931.33 KB
application/x-dosexec
Infection Chain
Summary by MalvaGPT
Characteristics
|
Hash | Hash Value |
|---|---|
| MD5 | 89a5f0f00f392a88d243a06f3bb5fda8
|
| Sha1 | 2ccd41209a047d3362278660e0090e2dfba53082
|
| Sha256 | 20c5a2ab17cfa4da1b5238324ce835318943157f35e1edf33ef97eeb9c95a0ad
|
| Sha384 | 505c3738add1a2a4e6cc2f7281444283568286aaa714c66552a40f1be0dc19c2ae5106b840381331fc8e2992022a8d8c
|
| Sha512 | 6de5ec5a572c20f70548dafb56e714ee79c65c3e1fa206b9c0d9250ff87c5e7434ba163435c63c13c0edea155b13670b490d0f94bb1e18994d77c406bcb0153a
|
| SSDeep | 12288:ntb20Qc3lT7af41ePBRYuQLKpqeUhbTv5OFgNuPPpHSga97sO8G66A:ntb20pkaCqT5TBWgNQ7aROG66A
|
| TLSH | F315AF1373DD8361C3B25273BA26B701AEBF782506B5F96B2FD8093DE920121525E673
|
PeID
Microsoft Visual C++ 6.0 DLL (Debug)
Microsoft Visual C++ 7.0 - 8.0
Microsoft Visual C++ 8
Microsoft Visual C++ 8
Microsoft Visual C++ v6.0 DLL
VC8 -> Microsoft Corporation
File Structure
89a5f0f00f392a88d243a06f3bb5fda8
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
Informations
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | PDB Path: ???? |
89a5f0f00f392a88d243a06f3bb5fda8 (931.33 KB)
File Structure
89a5f0f00f392a88d243a06f3bb5fda8
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.