Malicious
Malicious

Share on LinkedIn
Print
AutoIt Compiled Script
MD5: 89ff8786fb298f659fa8b246c8e7ea69
Size: 1.16 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 89ff8786fb298f659fa8b246c8e7ea69
Sha1 21e49c1bb0e68e4771381801f8dd602fd03f8a20
Sha256 ac5fa0b95eb652ea20dfe2764447f4dd75e33036c9ed1ece7b27acbf58b3d476
Sha384 6f856efe892a9955066ecac8fb3b8da0def5e5fdaa26d4655f030ffe04b2c36ff9efff909c0d3ec9e9b03751f426f33b
Sha512 b0615fa11279206d25e62a358cb05e4409b7df4091365ebae48fac5843b07fe12fa6e5d5ffd31882f4585650493144fefab387248cfa41ee714fd02316a7177d
SSDeep 24576:Ltb20pkaCqT5TBWgNQ7auW28F/c4M1DE6A:IVg5tQ7auWF/7M1Q5
TLSH 4E35BE2323DE8361C3B25177BA25B355AE7F7D2506A6F45B2F94193CA930423134EAB3
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
autFF73.tmp.tok
Malicious
[Cleaned].au3
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
PDB Path PATH
?huhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙