Suspicious
Suspect

Share on LinkedIn
Print
Rar Archive
MD5:
Size: 0 B
application/vnd.rar

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
0700d64d4d0b584cddd7eb7d7bea1c4e
INV CAT-26104.pdf.scr
[NSIS Installer] @ #00010608
System.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.reloc
LangDLL.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_DIALOG
ID:0065
ID:1033
kommandofortolkeren.Erg
Agurkesalaten79.eks
Pristes.Tat
Breakover.arc
Comfort.dec
Genbrugspapirers.jpg
Genbrugspapirers.jpg-preview.png
Glabreity.uns
Lysteligst.txt
Motorens65.duc
Nicotian.jpg
Nicotian.jpg-preview.png
Nonsync130.apo
autentificeringernes.ren
biskuit.anv
bondegaarden.ini
brevkasse.ere
cand.jpg
cand.jpg-preview.png
chich.bel
clarkias.ret
codiniac.jpg
codiniac.jpg-preview.png
creephole.ban
gaigas.txt
garnvinde.txt
hestekastaniernes.ven
hypercorrect.jpg
hypercorrect.jpg-preview.png
iconometer.vin
ideposernes.tit
inapproachable.txt
inconsequently.hau
korps.asc
kymnel.jpg
kymnel.jpg-preview.png
lekythoi.bea
lysestagernes.res
magani.jpg
magani.jpg-preview.png
melanocomous.ban
mineralizable.txt
mycological.blo
nonaid.run
omneity.txt
orthometry.txt
rackets.due
rovdriftens.amb
stradametrical.ini
syndetically.unv
systemkonsulentens.ngl
tacklingers.aqu
unrelegable.hol
vamper.krv
womenswear.ini
[SETUP_DECOMPILED.NSI]
[Authenticode]_437b46a4.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
Resources
RT_BITMAP
ID:006E
ID:1033
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
RT_DIALOG
ID:0067
ID:1033
ID:0068
ID:1033
ID:0069
ID:1033
ID:006A
ID:1033
ID:006D
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
An error has occurred. This application may no longer respond until reloaded. Reload 🗙