Malicious
AutoIt Compiled Script
MD5: d0d0ca6db869e42b291ded68617273bc
Size: 1.19 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
This sample is a 1.1 MB AutoIt Compiled Script. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature. Static analysis extracted 28 embedded or derived files. It matches 8 YARA rules. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.
- SHA256
- dd56ed5cf4a23ae82f28423890e13b64e12b130088fe4fb1e71ecf491cfacf4f
- MD5
- d0d0ca6db869e42b291ded68617273bc
- Verdict
- No known threat found
- File type
- AutoIt Compiled Script · 1.1 MB
Cite this report: https://app.malva.re/sha256/dd56ed5cf4a23ae82f28423890e13b64e12b130088fe4fb1e71ecf491cfacf4f
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
AutoIt Compiled Script
Size
1.19 MB · 1,190,400 B
First seen
2025-07-14 07:47 · one year ago
Last seen
2025-07-14 07:47 · one year ago
Last analysis
2025-07-14 07:54 · one year ago
Hashes
MD5
d0d0ca6db869e42b291ded68617273bc
Sha1
7cb72c0c96cfa99a2fa4d9542f3c4dc55e018a20
Sha256
dd56ed5cf4a23ae82f28423890e13b64e12b130088fe4fb1e71ecf491cfacf4f
Sha384
1e6f2d91b53ee19c904bfe71e5a95a20a6305d57c36b182b593cbaae3eb9cc88af61bdd215c65c9d5a92cd14b384d228
Sha512
637f2b33971d07230b7fdb4b57a814d699327763a7dc0eef314e26a495f405b6ebb51190438d3c973b5071e380ba7566c68f3eb33fb29ae95c358a6dfc0f2a14
SSDeep
24576:ctb20pkaCqT5TBWgNQ7adraSEqhb07ecY4KBnwJ3k16A:FVg5tQ7admkcY9JwJ3s5
TLSH
9845CF1373DD8361C7B25273BA26B701AE7F782506A5F96B2FD40D3DB820122525EA73
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
3 malicious · 29 files
A3Xd0d0ca6db869e42b291ded68617273bc
Structure
A3Xaut89BB.tmp.tok
A3X[Cleaned].au3
BINResources
PDB Path
PATH
?huhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential