Malicious
Malicious

AutoIt Compiled Script
MD5: 974c03e1415ad454a2e08f9183ccd51f
Size: 1.07 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 974c03e1415ad454a2e08f9183ccd51f
Sha1 64e7ac789c4ec802a1cbd810e301d67bb2104cb7
Sha256 8bdee3f4c6e55e34c73242cee7d02b02bed8a4012d5f750a1c58764668c4ef0f
Sha384 bde357609f348b52be1df23bc6ef1fefeb755ab456c3ce46c693383a04a220a6d7515758c6241f74778df98048a273f3
Sha512 033206dcb82913fff0e4b19cd9206280e65c16efb8ce0586e26304d31ea8e8c8761d06a0209b4600065b37cdcf77ec3bbc588b70b41e2d9dc3a5b42172e91fc1
SSDeep 24576:d5EmXFtKaL4/oFe5T9yyXYfP1ijXdauu0ZirN:dPVt/LZeJbInQRauuEi
TLSH 5D35BE027381D062FFAB91334F5AF6125BBC69260123EA1F13981D79BE705B1563E7A3
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
aut53EA.tmp.tok
Malicious
[Cleaned].au3
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:2057-preview.png
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: t$di
aut53EA.tmp.tok
Malicious
[Cleaned].au3
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:2057-preview.png
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙