Malicious
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
6 malicious · 89 files
EXE06e631c873efa69a491323cf917e4aa7
Structure
RAROverlay_dd52baec.bin
BIMigki.bim
MSCekap.msc
VBSqnbisvtf.bmp
PS1[PowerShell Command]
PS1[Deobfuscated PS]
BIN[Base64-Block]
VBSjcxr.vbe
EXEdrfdwq.3gp
ICMghejhvxu.icm
EXErrjtug.exe
XLSehvopgu.xls
DOCXippovax.docx
MSCovvmjt.msc
XLSlmewsmrta.xls
DLLcqjgvwu.dll
JPGfvnam.jpg
XLScdvbset.xls
BMPmkxxjca.bmp
ICMmtqx.icm
ICMkiutx.icm
PPTrsvqsmo.ppt
ICMrpxdhej.icm
MP2qttdw.mp2
3GPdlsomcenc.3gp
PDFnllmg.pdf
BINResources
| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_dd52baec.bin (894474 bytes) |
| Info | PDB Path: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb |