Malicious
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
6 malicious · 95 files
EXE141d06e69b9af08e784926e96be0ade5
Structure
RAROverlay_9b8ae542.bin
QVUcifrcj.qvu
DOCXdqbhlhm.docx
VBStgldehorju.exe
PS1[PowerShell Command]
PS1[Deobfuscated PS]
BIN[Base64-Block]
VBSbanv.vbe
EXEpjjqtoojlx.ppt
MSCgwmegk.msc
XLSduuemrin.xls
BINdwbjwfkh.bin
JPGsrgxmrmxrk.jpg
3GPcewqtb.3gp
TXTqeev.txt
MSCtjbfgg.msc
EXEbsadjo.exe
JPGfmqbvcf.jpg
EXEqknjvdqt.exe
MSCicjcmujer.msc
EXEwmniglkck.exe
BMPbbubnnfo.bmp
MSCiperln.msc
BINmmcpxpnct.bin
XLwiqni.xl
EXEqbifgvqif.exe
JPGvdsfohc.jpg
MSCtmqbdgghjx.msc
XLSfkssi.xls
ICMglafbiufg.icm
PDFqqmpcjbws.pdf
DLLwqegqqijt.dll
BINResources
| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_9b8ae542.bin (900254 bytes) |
| Info | PDB Path: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb |