Malicious
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Encoded VBScript file
Detection
PeID
Borland Delphi 7 - Nstd EP - ASL sign Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12
4 malicious · 58 files
EXE1ad42b39ef38e189b35f5948d6a77c8a
Structure
P7B[Authenticode]_f50b16b4.p7b
BINResources
BINRT_ICON
BINRT_RCDATA
BINID:0000
BINID:0
Structure
VBSOverlay_d162dabd.bin
EXEmschainCommon.exe
Structure
BINResources
BIN.Net Resources
VBSFhJqaTYnZizTp91yu3aBvCalRWUWGXL7YekBq7Vz1CQsoNJngdaiTmONRH6l.vbe
BATTq6GMB2WUtz9sbJln.bat
BINResources
P7B[Authenticode]_d85b9262.p7b
BINRT_GROUP_CURSOR4
BINRT_VERSION
VBS1ad42b39ef38e189b35f5948d6a77c8a.decoded.vbs
| Name | Value |
|---|---|
| Info | Authenticode present at 0x1C6CE00 size 8304 bytes |