Malicious
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Encoded VBScript file
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
4 malicious · 38 files
EXE0094e9198a63ba831db0c65b9f748aa3
Structure
VBSOverlay_e9b6e85a.bin
EXEWebruntime.exe
Structure
BINResources
BIN.Net Resources
VBSddKcdrW76JvzCbyzUMvH9kBSf3C63Icq0b37c6Rwt7sV.vbe
BATWr8O5wwe5nthYx1oxfBV0J7ibO7nKF7jrT3muVKb4Gcnrk2uyGgGwce.bat
BINResources
VBS0094e9198a63ba831db0c65b9f748aa3.decoded.vbs
| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_e9b6e85a.bin (1915318 bytes) |
| Info | PDB Path: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb |