Suspicious
Suspect

2abf93b7208d961196a6b2921adbaa6c

PE Executable
|
MD5: 2abf93b7208d961196a6b2921adbaa6c
|
Size: 3.56 MB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
2abf93b7208d961196a6b2921adbaa6c
Sha1
1c2a047b3b8615eb5e64767ef59babe6970df435
Sha256
b16d191de9efc473dac2cf858425fdb0a851eb56e10bb9f0cfa9e3f7961c9d42
Sha384
e1ba81da57180eb345ceecb827ca8d251d73b0fb1c931efa003cf11ed1a44d7797496c9d1eb048b6db7e265b495647cb
Sha512
a7361925d695619bb5b4d6fb290fd3648ef518ba486fc0a476c861e34fed397bbafb08bd1f69bdfbb32a9cd3d917ead8a4af3db6772890658c977ae90893a7f9
SSDeep
49152:bUcVFurU90BJDAAncJNZayMUeswP6uLRWAh9XtTFkt7j0oDnYoxx5ZjmOY:48FZ9JAnYPa56wD8CJkt7YmYoxPMB
TLSH
9EF53397F90D6DABDA436B7545682563EBCA91270FF618C4074ECB0EB6D3413E08B42E
File Structure
2abf93b7208d961196a6b2921adbaa6c
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Artefacts
Name
 Value
URLs in VB Code - #1

https://enigmaprotector.com/taggant/user.crl0
URLs in VB Code - #2

https://enigmaprotector.com/taggant/spv.crl0
2abf93b7208d961196a6b2921adbaa6c (3.56 MB)
File Structure
2abf93b7208d961196a6b2921adbaa6c
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
Characteristics
No malware configuration were found at this point.
Artefacts
Name
 Value Location
URLs in VB Code - #1

https://enigmaprotector.com/taggant/user.crl0

2abf93b7208d961196a6b2921adbaa6c
URLs in VB Code - #2

https://enigmaprotector.com/taggant/spv.crl0

2abf93b7208d961196a6b2921adbaa6c
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙