Malicious
Malicious

ef04a32417f8ca6d6884c5b4ef18450b

AutoIt Compiled Script
|
MD5: ef04a32417f8ca6d6884c5b4ef18450b
|
Size: 529.92 KB
|
application/x-dosexec

Print
Infection Chain
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
ef04a32417f8ca6d6884c5b4ef18450b
Sha1
c99f2cd80da4579d327c3282e82973cb7e47037c
Sha256
0cb39f01b92e9334500594bd48e687823e83879c9411db5fc9b41e2b97406502
Sha384
8fb0273f6c1309f4e70b52ba02dc8a4bdab016cdb8cccecc0ec5c44b89bae2b734902a921e5e5500770a842fe054fc56
Sha512
62d2ddae433c47eb823307c845b8a99a6f30556f248213d2e82b1bf490fc156d5dce0088afab839b3fe99d8c91ed715024f27c2bca4ff845ef103d5fdae0bf81
SSDeep
12288:EOv5jKhsfoPA+yeVKUCUxP4C902bdRtJJPiw0of3XWTNeX3TqvZ:Eq5TfcdHj4fmbTxm0TqvZ
TLSH
E2B41260A9C8CC72FA602232D07ACEA01A257932CDD5675D5799FA4F78B23434493B7E

PeID

Microsoft Visual C++ v6.0 DLL
Packer=UPX Compresor..Gratuito... www.upx.sourceforge.net
UPX -> www.upx.sourceforge.net
UPX Modified >> *$igBy Ahmed18
UPX v0.89.6 - v1.02 / v1.05 -v1.24 -> Markus & Laszlo (overlay)]
UPX v1.25 (Delphi) Stub
UPX v3.0
File Structure
ef04a32417f8ca6d6884c5b4ef18450b
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
.rsrc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
aut3635.tmp.tok
Malicious
[Cleaned].au3
Malicious
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
ef04a32417f8ca6d6884c5b4ef18450b (529.92 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙