Malicious
Malicious

AutoIt Compiled Script
MD5: c31da04677acf0abf7c84c05fef7914a
Size: 985.6 KB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 c31da04677acf0abf7c84c05fef7914a
Sha1 65ed1b82bc2a7c5fab5bd32f6f8c4427d3f5f359
Sha256 97ff06a25f7c699e129771cde557021cbf49f4e6ed15dfeb9b7d29eacafa9926
Sha384 bbbe475d3d0a225d64c16ec3b60b5ecd174f0e6b14a6bd4461e1cacf5049cca6c00d1aeb03bf060ff7ce3a994a404921
Sha512 cb1f75ade43f0127e4c2b474f69a296ec020bd0f769f41dbe4c340077aab6b11d0ab0fef728f1434d7fd786503c6651a78014697412475c8f29acbe4980ba1a7
SSDeep 24576:55EmXFtKaL4/oFe5T9yyXYfP1ijXdaMU6n1HFmA:5PVt/LZeJbInQRaMdH
TLSH D6259D0273D1D062FFAB91334B5AF6115BBC79260123A62F13981DB9BE701B1563E7A3
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
aut33A9.tmp.tok
Malicious
[Cleaned].au3
Malicious
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: t$di
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
aut33A9.tmp.tok
Malicious
[Cleaned].au3
Malicious
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙