Suspicious
Suspect

2a1448fab85e8cdf0715d0cdd7f7e968

AutoIt Compiled Script
|
MD5: 2a1448fab85e8cdf0715d0cdd7f7e968
|
Size: 1.11 MB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
2a1448fab85e8cdf0715d0cdd7f7e968
Sha1
048d09aba35b23bfe1f2f3bae1a56b0a5545ef38
Sha256
9a426abe84ab31f429706450c9e21eef7fe10eae1dbb6cdd9b955279bb6bcefa
Sha384
fe390e47c6d84082f82763fea9bbabdda6d4349982ee4354066a3fc069b3269915df8cd417af7fdee5bd091c740d4741
Sha512
73f8406debafbe596edebcaf4757b120a04c816875b5826938eaf1b2720a5be4b96e51628a84eacca2607c682c074f1c1bee85e66836635c7ff01e213f6d7f2d
SSDeep
24576:HmsCUhgao33tnrPw62ai0ZaElA3KBi1GlxB4KSwSmv:GcTo33trv7zBi1GloWv
TLSH
09352363A5E04255F72EE63980359AE6447D5C2488F8F047E2403FABA6F2626CD3C777

PeID

Microsoft Visual C++ v6.0 DLL
Nullsoft PiMP Stub -> SFX
File Structure
Overlay_0e10b84c.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
RT_DIALOG
ID:0069
ID:1033
ID:006A
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

Overlay extracted: Overlay_0e10b84c.bin (1047700 bytes)

2a1448fab85e8cdf0715d0cdd7f7e968 (1.11 MB)
File Structure
Overlay_0e10b84c.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
RT_DIALOG
ID:0069
ID:1033
ID:006A
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙