Suspicious
Suspect

28f70ab7ac22168bbf743fa1b3b541b5

VB5/6 Executable
|
MD5: 28f70ab7ac22168bbf743fa1b3b541b5
|
Size: 211.94 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
28f70ab7ac22168bbf743fa1b3b541b5
Sha1
faffc91a1ca40b80a3abe227a744f2f942d82253
Sha256
aa0f60c61d372c154b22ee6ce4997f1e044541859441fbcd247727cc7e81ec87
Sha384
8992a989088ffe95896dae64d09e73fd475272aa0047c19c3d33ee9acdc671bee0a292acaad8e8c6155902db268cf35f
Sha512
cc3ffb5f456d36603421e5961fb5ac0c43f75f2df0fea5cd5803af775112142545604a2125c231e31f915c5f36fb351e80e66fe6f0e537ab1594e6ada23f4396
SSDeep
3072:zvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unF:zvEN2U+T6i5LirrllHy4HUcMQY68
TLSH
F324F85BEA41312ED96397F0942665EAB9222E351F91AC4B23D0BF8534B1703B5F132F

PeID

Microsoft Visual Basic v5.0 - v6.0
Protect Shareware V1.1 -> eCompserv CMS
File Structure
28f70ab7ac22168bbf743fa1b3b541b5
Overlay_0468b55c.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rsrc
Resources
RT_ICON
ID:7531
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
VB6 Structure
VB Header
VB VBAProject Info
VB Object Table
VB VBAProject Info 2
VB Register Info
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

Overlay extracted: Overlay_0468b55c.bin (23528 bytes)
28f70ab7ac22168bbf743fa1b3b541b5 (211.94 KB)
File Structure
28f70ab7ac22168bbf743fa1b3b541b5
Overlay_0468b55c.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rsrc
Resources
RT_ICON
ID:7531
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
VB6 Structure
VB Header
VB VBAProject Info
VB Object Table
VB VBAProject Info 2
VB Register Info
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙