Suspicious
Suspect

3493eb7c08fda4e4a9da10120706f5b7

VBScript
MD5: 3493eb7c08fda4e4a9da10120706f5b7
Size: 5.88 MB
text/vbscript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 3493eb7c08fda4e4a9da10120706f5b7
Sha1 4a2fd237aaa0bba208e2e277a36859710e8616ed
Sha256 63b0ac72171150804e00d64c5ecb209b7347c68db5aa8a7f97c965abf5f5dad6
Sha384 f0ff12e24e24bc8fb040c0ee7bb5b9118a65e7a9c2859b903cedafa862e0ab0777aac9e8068bf86792ef082a68ff947d
Sha512 c843c653382f0b6976b259987a7eb5a5a0d5d73ed178c63fb44510ecccf856b326f7993930c5c962f4521cd347f1b316e8f389fb1c017229dcce7110c109e3a7
SSDeep 98304:1715UoPOjalZfn4HUwb98JuRlb9M1ewVDOYKJ2ntunGADSHMavmYQi3MG:171qoPlZfkJA+ZEewROX2tz63k
TLSH B14633AB472A3759D8916FB4478E55332FE04E728C4C5B8E3A5DCFE90D9D3B0540A8B8
PeID
x64 Themida / Winlicense v3.0.x.0 PACKED sign ASL
[Authenticode]_1f02a2f5.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rsrc
.idata
.themida
.boot
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0-preview.png
ID:0003
ID:0
ID:0-preview.png
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0-preview.png
ID:0006
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x598400 size 15120 bytes
[Authenticode]_1f02a2f5.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rsrc
.idata
.themida
.boot
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0-preview.png
ID:0003
ID:0
ID:0-preview.png
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0-preview.png
ID:0006
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙