Malicious PE Executable analysis – 35898e183754

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

File

Type

Portable Executable file

Detection

PeID

Armadillo v4.xMicrosoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation

3 malicious · 27 files

EXE35898e183754e2d8a4fdb18f50345008

Structure

RAROverlay_a8fa0ce9.bin

VBSHideVaiR5.vbs

BATvaiR5.bat

EXER5.exe

BINResources

Name	Value
Info	Overlay extracted: Overlay_a8fa0ce9.bin (115731 bytes)
Info	PDB Path: d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb

URLs in VB Code - #1 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential