Malicious
AutoIt Compiled Script
MD5: a71e5c9d397eb5b0bb53911a49ba0d6a
Size: 1.15 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | a71e5c9d397eb5b0bb53911a49ba0d6a |
| Sha1 | 375951565b7e3da4ff7ddcc866adc3a8bf43c274 |
| Sha256 | 8f309a34a73ea2947ea6bfa186933439a1c385be8ad8452ead87dfb31781f63e |
| Sha384 | bcc6eba064204154b28be0777ad1d3f4121f8bd0860884ea39f4860aee06678debc948dc695385a52b1d3419553fcaec |
| Sha512 | d43d6dcde71741598b3d74d6049fa23c07f8405d2f0b2393705bc12aa665bd5e39856bac0f00c0b358aed825240e0ef56af745937cc0ce8390472824d060f2fb |
| SSDeep | 24576:Xb2+CvRSEHiRkTJrpkBVwlHOFKMBQPHFLNGFiXZkGUuTsD4:L2hvRhHukNyVtKMW1EAZk1SI4 |
| TLSH | 1935F119D7E804F9E0B7E574CD974912EB767C4A43B1E6CF03A469A61F232908E3DB12 |
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 7
STICH kept: 2secondary ignored: 5
bin
3img
2Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:autoit
Shape
pe:exe>pe:autoit
malicious
2 nodes
Path
pe:exe>pe:autoit>pe:autoit
Shape
pe:exe>pe:autoit>pe:autoit
3 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Overlay extracted: Overlay_0878c1da.bin (669959 bytes) |
| Info | PDB Path: D:\Projects\WinRAR\SFX\build\sfxrar64\Release\sfxrar.pdb |