Suspicious
Suspect

3493eb7c08fda4e4a9da10120706f5b7

Share on LinkedIn
Print
VBScript
MD5: 3493eb7c08fda4e4a9da10120706f5b7
Size: 5.88 MB
text/vbscript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 3493eb7c08fda4e4a9da10120706f5b7
Sha1 4a2fd237aaa0bba208e2e277a36859710e8616ed
Sha256 63b0ac72171150804e00d64c5ecb209b7347c68db5aa8a7f97c965abf5f5dad6
Sha384 f0ff12e24e24bc8fb040c0ee7bb5b9118a65e7a9c2859b903cedafa862e0ab0777aac9e8068bf86792ef082a68ff947d
Sha512 c843c653382f0b6976b259987a7eb5a5a0d5d73ed178c63fb44510ecccf856b326f7993930c5c962f4521cd347f1b316e8f389fb1c017229dcce7110c109e3a7
SSDeep 98304:1715UoPOjalZfn4HUwb98JuRlb9M1ewVDOYKJ2ntunGADSHMavmYQi3MG:171qoPlZfkJA+ZEewROX2tz63k
TLSH B14633AB472A3759D8916FB4478E55332FE04E728C4C5B8E3A5DCFE90D9D3B0540A8B8
PeID
x64 Themida / Winlicense v3.0.x.0 PACKED sign ASL
[Authenticode]_1f02a2f5.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rsrc
.idata
.themida
.boot
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0-preview.png
ID:0003
ID:0
ID:0-preview.png
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0-preview.png
ID:0006
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x598400 size 15120 bytes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙