Suspicious
Suspect

21bae91344104a06490b1db481aa111c

VB5/6 Executable
|
MD5: 21bae91344104a06490b1db481aa111c
|
Size: 211.96 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
21bae91344104a06490b1db481aa111c
Sha1
c46ce308aa41c2cab9c602379be89777b954ca57
Sha256
bf603b97842ee8eb65e630c89f62db37ab2239710b6b0067cdb97735320c03ba
Sha384
09a00c9e21c4e63bbdfe12310fc54289f90c19487744681f4af560de6e6465b4cb15f7cd9dbcd4182a58e1a82cfa35a7
Sha512
230cf657e7732bd1116aeafad999329068ae94067c6fdad114b2ed74aacf07aadd95bca005e3fa29c9e5ecb4515507f9f8d66a12b8eba52c06417ffe89eec096
SSDeep
3072:zvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unP:zvEN2U+T6i5LirrllHy4HUcMQY6y
TLSH
5A24E81FFA44712EE8A385F0546BA1A676221E360F919C0B67C29F8534B4563F6F132F

PeID

Microsoft Visual Basic v5.0 - v6.0
Protect Shareware V1.1 -> eCompserv CMS
File Structure
21bae91344104a06490b1db481aa111c
Overlay_5a6fd7de.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rsrc
Resources
RT_ICON
ID:7531
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
VB6 Structure
VB Header
VB VBAProject Info
VB Object Table
VB VBAProject Info 2
VB Register Info
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

Overlay extracted: Overlay_5a6fd7de.bin (23546 bytes)
21bae91344104a06490b1db481aa111c (211.96 KB)
File Structure
21bae91344104a06490b1db481aa111c
Overlay_5a6fd7de.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rsrc
Resources
RT_ICON
ID:7531
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
VB6 Structure
VB Header
VB VBAProject Info
VB Object Table
VB VBAProject Info 2
VB Register Info
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙