Malicious
Malicious

AutoIt Compiled Script
MD5: f06d93f0544a9b6cd440073bb212e7fb
Size: 742.91 KB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 f06d93f0544a9b6cd440073bb212e7fb
Sha1 fc2d32574de9d54a609c672762be1f21e1a1ba5f
Sha256 1bfabcd7bd0dd5f3e9220b42c0457f89282ed0168d0f69d7b1af008c81d3ef2b
Sha384 0464354d26e3d5df38fe7507efb4eaea8d2f84f87a8996fac39b553d956ed1c5a22dd7c571295814505c444e04c154a8
Sha512 02b57933d35bb10ce67215e4cc6b23a95ffe0665055daddec8af7e166fa5a0461476d4684e12fdd2b0cc4bbc92957b785251b0f6b70cb1c7e01d95ff980fc1ca
SSDeep 12288:9z7hU5I5yuNHIgzSFKxWltRohBfSTso93UXvS1cwazbrmJqUhYfmygETWTzw:9f+iN57Gtene3UaKKg8qifw
TLSH B0F4225298D098A1D65077308436CC64DA783D31AE49735E833DEABB68723C7FE92B1D
PeID
Microsoft Visual C++ v6.0 DLLPacker=UPX Compresor..Gratuito... www.upx.sourceforge.netUPX -> www.upx.sourceforge.netUPX Modified >> *$igBy Ahmed18UPX v0.89.6 - v1.02 / v1.05 -v1.24 -> Markus & Laszlo (overlay)]UPX v1.25 (Delphi) StubUPX v3.0UPolyX 0.3 -> delikon
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
.rsrc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
autA06A.tmp.tok
Malicious
[Cleaned].au3
Malicious
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
.rsrc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
autA06A.tmp.tok
Malicious
[Cleaned].au3
Malicious
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙