Suspicious
Suspect

Share on LinkedIn
Print
AutoIt Compiled Script
MD5: e80476e08d6e39601195e9f1556dbf2a
Size: 1.06 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 e80476e08d6e39601195e9f1556dbf2a
Sha1 3e15beabde43b1db876c2dd27d062f3421181ac3
Sha256 31c73da21862c01ecb0756a853404ea93ddf1db86ce2a6cb52ccd0ce1cfd01c3
Sha384 c494ba08c2df22929087f289a3c6e5a5948edb5cce6368de1fc0a409a9cdaa707c90d43c4a606b9b9ea303a8e6a99651
Sha512 bed9c2098e6306cba51afc032fb817ada2cd43192a2ecd1c7e1e90e3ce7d10f7802cc04dbc5485371fdc9b17f89f05a989d5d12d9a5c0ad389e867c9730ad71c
SSDeep 24576:bzZWvRvi5e+XIOdExxkcmeoQpXOHH2Kei0R7OGb4LLS/r:bci8+XIfQcmY+HH2DOXLmD
TLSH 383523C32A70D963E5739F353074EA229D2DE3144B504F0BDB69C64EB82258C972F9A7
PeID
Microsoft Visual C++ v6.0 DLLNullsoft PiMP Stub -> SFXUPolyX 0.3 -> delikon
e80476e08d6e39601195e9f1556dbf2a
Trained.wbk
Information.wbk
Toe.wbk
Marriott.wbk
Craps.wbk
Karaoke.wbk
Queensland.wbk
Np.wbk
Affairs.wbk
nsExec.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.reloc
[SETUP_DECOMPILED.NSI]
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:1033-preview.png
RT_DIALOG
ID:0069
ID:1033
ID:006A
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
An error has occurred. This application may no longer respond until reloaded. Reload 🗙