Suspicious
Suspect

AutoIt Compiled Script
MD5: abcbcad21b2fc5037b95f1adcf481869
Size: 1.13 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 abcbcad21b2fc5037b95f1adcf481869
Sha1 d3637f0306b551db4143af4f409c68f9835baaa8
Sha256 40e3105cd34d54cacd7e2559e19f1fa28e6e9ee2a09bec6a5a083262f334fa14
Sha384 6a3620a23ad3a819d96d1fa4f11dbc0a0fc592aca7d8f0026a5ea89bcb1aab54d218e044810903cb899e8b6e6f0f1eab
Sha512 2c08742a89e7863dbd2581924b3187832543d76994d77f11eaefb935838c80997e471f7c9ada81336ff1c794fe148b479e20f1c8e68b4a834a673c39fbd21402
SSDeep 24576:SzZU8QM0OIBYjbT+HxDL/l4ywvIfhsSKwoGUXairWC:SE/BAbTexDL/l45TwoGUaC
TLSH AD3533583C9450FBD49F02B424A0F67EEBD8A4D466F0A41A73B8890B03B5F49274D6EF
PeID
Microsoft Visual C++ v6.0 DLLNullsoft PiMP Stub -> SFX
Soccer.xltm
Travels.xltm
Offer.xltm
Roland.xltm
Effort.xltm
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.reloc
[SETUP_DECOMPILED.NSI]
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
RT_DIALOG
ID:0069
ID:1033
ID:006A
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Soccer.xltm
Travels.xltm
Offer.xltm
Roland.xltm
Effort.xltm
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.reloc
[SETUP_DECOMPILED.NSI]
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
RT_DIALOG
ID:0069
ID:1033
ID:006A
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙