Malicious
VBScript Encoded
MD5: 14cde04bb1691b968cdaccbf2f3bf284
Size: 1.22 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 14cde04bb1691b968cdaccbf2f3bf284 |
| Sha1 | 0c97b2703e9d8602445a82bcaa8557e2907f30cd |
| Sha256 | 28b73ce836e196ccd13ceea6427928204e5c4f4da4e30d22a86b062eef4d72f9 |
| Sha384 | fd41aed7df4f3f98f39ddff3af32f2fb7bcca67ba864ede55d6f90ca8bf76ccaff9a37eb2218ecee762bfa3197eeccc2 |
| Sha512 | 2a34959f63428c3b7c2883a71d695ae3d8d01a138960b86a6591cdcdfb7792840842fc98c52d042c7b4c69b00578f52f5ff5fddd29b49a0835a8e42c085ee238 |
| SSDeep | 24576:u2G/nvxW3WieCCV/Kncgl4qiOTDyYwQDEXjuB:ubA3j4+lesH |
| TLSH | D9455A417E44CA21F0591633C2EF490447B4AC902AA6E72B7FBE776E55123A37C0DADB |
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
Malicious
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
7 / 7
Path
pe:exe>scr:vbe>pe:exe>pe:rsrc>bin
Shape
pe:exe>scr:vbe>pe:exe>pe:rsrc>bin
malicious
5 nodes
Path
pe:exe>scr:vbe>pe:exe>bin
Shape
pe:exe>scr:vbe>pe:exe>bin
malicious
4 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Overlay extracted: Overlay_f33b03e0.bin (900739 bytes) |
| Info | PDB Path: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb |
Command (COM trace) #1
UNKNWOWNmalicious
C:/MsShuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential