Malicious
VBScript Encoded
MD5: 1459e25f4b5830ed088f387c4d76ffd5
Size: 1.17 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 1459e25f4b5830ed088f387c4d76ffd5 |
| Sha1 | 0cb241620b46d0f215daa1d2c75db5e842a3a632 |
| Sha256 | 80fbb5dfe54e4834a377b50b7d204d4b90c1cd136e0aed440f344070e2592e96 |
| Sha384 | 8f167ee632a38386e20db9e1981eb0898768c8ace86e2f2f5e3b9341b20cfc7dbbcb8e4e4fa1768d2fca138a1698f9b8 |
| Sha512 | 8412a1362682e1ab16e9d63fb4ab537caba163fce3e1f4d639b49688c10296180486d22686c2d7848ee198555f070a365e90a97b21fb3ce4ee3792d915f978b8 |
| SSDeep | 24576:U2G/nvxW3Ww0tarTma/w3SEyqNWnttYlgl2+:UbA30aTmkwwbtF |
| TLSH | 8C4549027E44CA12F4191773C2EF460847B4AC902BA6E72B7EBA776D54123937D4DACB |
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
Malicious
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
7 / 7
Path
pe:exe>scr:vbe>pe:exe>pe:rsrc>bin
Shape
pe:exe>scr:vbe>pe:exe>pe:rsrc>bin
malicious
5 nodes
Path
pe:exe>scr:vbe>pe:exe>bin
Shape
pe:exe>scr:vbe>pe:exe>bin
malicious
4 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Overlay extracted: Overlay_f8e72b37.bin (848961 bytes) |
| Info | PDB Path: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb |