Malicious
Malicious

INV 1051 STMT.exe

AutoIt Compiled Script
|
MD5: fa55f194b8611778244883520d368203
|
Size: 1.2 MB
|
application/x-dosexec

Print
Infection Chain
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
fa55f194b8611778244883520d368203
Sha1
4496921d99576ea7896af50514f89d85618dbeb6
Sha256
6e1e2f0ca05288db4871164b0a649289dd3fbcedf2cdc92092a0576ffbcc4193
Sha384
d990a2e47ed6fee0beb22f6c6ab555e990876ef45cce60f364701de3e409844a285366c05b3d970ab32fe58ed1ce6f40
Sha512
8b2e39a31f4f55a79a08385011c9b78810c1496b7b306dc69b28a9547022c451037988e60603c4863ede6d77e223431588341fec91fa261e8c506ee688816c38
SSDeep
24576:n5EmXFtKaL4/oFe5T9yyXYfP1ijXda0aY71C6n76gSdMrCz:nPVt/LZeJbInQRa0nZCu76w
TLSH
7B45BE0273D1C062FFAB91734B5AF6115BBC79260123A62F13981DB9BE701B1563E7A3

PeID

Microsoft Visual C++ 6.0 DLL (Debug)
Microsoft Visual C++ 8
Microsoft Visual C++ 8
Microsoft Visual C++ v6.0 DLL
VC8 -> Microsoft Corporation
File Structure
INV 1051 STMT.exe
Malicious
aut76DC.tmp.tok
Malicious
[Cleaned].au3
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

PDB Path: t$di
INV 1051 STMT.exe (1.2 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙