Deep Malware Analysis of 11b8b0934790fc8a74f392f10bb5c7c4 | md5: 11b8b0934790fc8a74f392f10bb5c7c4 | Executable | PE (Portable Executable) | PE Memory-Mapped (Dump)

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	11b8b0934790fc8a74f392f10bb5c7c4
Sha1	0f4c8c7ec3936ae2375fcc3d1ebc11783cbdb76c
Sha256	3bd4b18e87e5707986da3059f204bb4e6f9c917e4c576cab484dda391c3e3673
Sha384	b06f2bb02ac09c150d2186c0bd1505aa6c13f1126f8b3640cb937d13ae9b7928ac360cecc3c23cd5c847a54f8d4dacb0
Sha512	9be103a6315235c84e3e842d7e69f5777d1a536ad79bc8a25d5f474a66ac86b3098d18e6b6bf181c139da4e0dbf58db7d601cbc4e50dac6b88d325eff94fe42a
SSDeep	98304:D8DqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:D8DqPe1Cxcxk3ZAEUadzR8yc4H
TLSH	B8363358726CA1BCF0450AB444B38E1AF7B37C5567BA4B0F8780866B0E53B9BAF94741

PeID

Microsoft Visual C++ 6.0 DLL (Debug)

Microsoft Visual C++ v6.0 DLL

Microsoft v12.00 64bit C++ DLL - sign ASL ( 64 bit )

UPolyX 0.3 -> delikon

File Structure

Informations

Name	Value
Info	PE Detect: PeReader FAIL, AsmResolver Mapped OK

Artefacts

Name	Value
PE Layout	MemoryMapped (process dump suspected)

11b8b0934790fc8a74f392f10bb5c7c4 (5.3 MB)