Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
[Authenticode]_ec43713d.p7b
Overlay_ed5a62d8.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.@+e
.-e
.b"1
.ub*l
.V.K
.h
.;O4*v(
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
RT_MENU
ID:01A9
ID:1033
ID:01ED
ID:1033
ID:024F
ID:1033
RT_DIALOG
ID:005C
ID:1033
RT_STRING
ID:006A
ID:1033
ID:0085
ID:1033
ID:00F7
ID:1033
ID:012B
ID:1033
ID:0272
ID:1033
ID:0275
ID:1033
ID:02B5
ID:1033
ID:0376
ID:1033
ID:0386
ID:1033
RT_RCDATA
ID:00EA
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x3B600 size 7409 bytes
Info
Overlay extracted: Overlay_ed5a62d8.bin (290 bytes)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙