Suspicious
Suspect

3d66bbe9035e1a5348f742af04cbfbe4

VB5/6 Executable
MD5: 3d66bbe9035e1a5348f742af04cbfbe4
Size: 466.94 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 3d66bbe9035e1a5348f742af04cbfbe4
Sha1 a89dfc3688d6f074ce54a6a88a3d1b6db406fcda
Sha256 a8fca85b5837e1c55ae7e06d68bb2d29b05c6b149d4eec1e3cfff8aec32ff7c1
Sha384 5cbc072fcf772fb6946a55c3129ef4e134123ef7a7f6ff8b1f5f02c833f8e704cf6a3ec4da100df722540213d7db08e5
Sha512 979ed2947c8a2dd8a6421191e9a6086ea434f683be166c831106057c4fa4c0fb90b2a9d637a5b7b75298312ff842a8a830d62e0bb7f64688547f6bd20327e896
SSDeep 6144:i8d1/w5KA81IJ8GpF6nuTmOOUiBUrjYhwNLVu1ihLdMyjSywk47qMylgfckPy+qe:RjYKkJj6GmZUiqrWwNQcMvreMylgEX
TLSH 9AA44A03EA60612EF1A389F1A8B5629668267D3A17DCE88BF3405F5935315D3ACF131F
PeID
Free Pascal v0.99.10MASM/TASM - sig4 (h)Microsoft Visual Basic v5.0Microsoft Visual Basic v5.0Microsoft Visual Basic v5.0 - v6.0Protect Shareware V1.1 -> eCompserv CMS
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rsrc
Resources
RT_ICON
ID:7531
ID:0
ID:7532
ID:0
ID:7533
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
VB6 Structure
VB Header
VB VBAProject Info
VB Object Table
VB VBAProject Info 2
VB Register Info
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rsrc
Resources
RT_ICON
ID:7531
ID:0
ID:7532
ID:0
ID:7533
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
VB6 Structure
VB Header
VB VBAProject Info
VB Object Table
VB VBAProject Info 2
VB Register Info
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙