18a5ac918c8adaefb3ae6c93d802cb19

PE Executable

MD5: 18a5ac918c8adaefb3ae6c93d802cb19

Size: 16.79 MB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	18a5ac918c8adaefb3ae6c93d802cb19
Sha1	66223509d0083fbd05b5156f19f5ef85689187b9
Sha256	d74ae7334478a9adb119a68fc56d43b3d314a63d4ebdd3308e4ea5c91c333fb1
Sha384	527ef32d10bc1939bdd2ad9efd775d3233fab75b616251cdce77b4826bb880c7156fcf4534487e6644af9a38d976ebcf
Sha512	b334ecb240bc06e04078762701aad1a950ae2f6791bc71567b2fa37252c222d21852416aa1937ae1aef2032bf08e5de9fc0e245aeb7467cec0a0a214236a5133
SSDeep	196608:n8jd3I7FpsVOFroRCZpHo+fRz0Uef0V9/gdvzf5VsswAUzvHBv64Alde63AACc:U3I7gVOFrHtNyMV9/SzhoAyBC4aDX
TLSH	2C073337F268913FD5AA0B3209B39150993BBE606A098C9F03FC394DCF765611E3B55A

PeID

Armadillo v4.xMASM/TASM - sig4 (h)Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12Private EXE Protector V2.30-V2.3X -> SetiSoft TeamVC8 -> Microsoft Corporation

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x1000004 size 10672 bytes
Info	PDB Path: t$di

URLs in VB Code - #1 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #2 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #3 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #4 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #5 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #6 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #7 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #8 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #9 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #10 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #11 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #12 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #13 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #14 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #15 URIsuspect

fthuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

No malware configuration was found at this point.

URLs in VB Code - #1 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu