Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
2ca8603206f79b6e72345b5344b83631
Overlay_76376fb3.bin
Overlay_ffbabe2c.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
Resources
RT_ICON
ID:0001
ID:16393
ID:0002
ID:16393
RT_DIALOG
ID:0064
ID:1033
ID:0066
ID:1033
RT_STRING
ID:0007
ID:1033
RT_GROUP_CURSOR4
ID:0080
ID:16393
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:16393
Name Value
Info
PE Detect: PeReader FAIL, AsmResolver Mapped OK
Info
Overlay extracted: Overlay_76376fb3.bin (20527 bytes)
PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙