Suspicious
Suspect

Rar Archive
MD5: 32b165cc91f7b42a0b68d51a2061aa58
Size: 841.68 KB
application/vnd.rar

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 32b165cc91f7b42a0b68d51a2061aa58
Sha1 d46f04329fe31d3d7a37dd5cce27ce4c1edfd57b
Sha256 791c8a3f64220eef4d4654c68fc89f61f29ebe18cbac0522cd13b77e21d7242b
Sha384 4dad60b8aac19982a18b273116bda9fb7b66dcbebcf77aed8a1cd9e40365ff0e0535e40b50cb7d57fd079b1c18c9cc45
Sha512 26d63138de5aeb709e849f8d094da3521851211bc2e498a05a8a0925212bc388ea16d91808c259f34ad247c095669dbd32aff7259997e270b72c12473bc27fb3
SSDeep 24576:SJXL31iPXlVZJ5UPGQvlkr9l9BjAmttfjbn:SJ1sbH5UPHUl9hX
TLSH 8405231354DBA7DD93AD73E97EDD448082C2278E2BD026278F384DA475082D8E4EF267
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
ID:0008
ID:0
ID:0009
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
Faculdade_ProjectGame.FormProfile.resources
Faculdade_ProjectGame.FormMain.resources
$this.Icon
[NBF]root.IconData
F6
[NBF]root.Data
menuStrip1.TrayLocation
timer1.TrayLocation
timer2.TrayLocation
Faculdade_ProjectGame.Properties.Resources.resources
gbSq
[NBF]root.Data
[NBF]root.Data-preview.png
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
ID:0008
ID:0
ID:0009
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
Faculdade_ProjectGame.FormProfile.resources
Faculdade_ProjectGame.FormMain.resources
$this.Icon
[NBF]root.IconData
F6
[NBF]root.Data
menuStrip1.TrayLocation
timer1.TrayLocation
timer2.TrayLocation
Faculdade_ProjectGame.Properties.Resources.resources
gbSq
[NBF]root.Data
[NBF]root.Data-preview.png
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙