Malicious
PE Executable
MD5: 44b335113be570fc79e9e2ee787718fc
Size: 1.38 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Encoded VBScript file
Size
1.38 MB · 1,380,034 B
First seen
2026-08-18 16:02 · 2 months ago
Last seen
2026-08-18 16:02 · 2 months ago
Last analysis
2026-08-18 16:02 · 2 months ago
Hashes
MD5
44b335113be570fc79e9e2ee787718fc
Sha1
228a074c78c77922612a355e9635311bbe6a7a78
Sha256
e676a02a00e1ebca5b00aeafafcb397c9afadc39ecb5e9464d3cb9622f851a3f
Sha384
b17e0627ae50342376b655a13ec05c567f59bb76bef0484710b197fe204801a383b6fe4f121445225cb86b4e2c42aae1
Sha512
7f5b05334a408a9b358c7e1dfc1ce620f375474238faac59aa2cbbedc1be5010396063be9585a0c07c97f29ec353e725216855ca896a06dbd12d78a9ea0174f6
SSDeep
24576:u2G/nvxW3WieChVtG/LCSO0ZAruazXEOqf9ff2HPFknukWvgUcBV:ubA3jhVtG2BblOIdknuTvgUcr
TLSH
65557B027E40CA11F0191633C2EF450487F4AC516BA6E71B7EBA376E98163977C5CAEB
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
4 malicious · 34 files
EXE44b335113be570fc79e9e2ee787718fcT1059.005
Structure
VBSOverlay_b7757497.bin
BAThglSt.bat
EXEagentSessionBroker.exe
Structure
BINResources
BIN.Net Resources
VBSWdwLtW2tUcUC.vbe
BINResources
VBS44b335113be570fc79e9e2ee787718fc.decoded.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
7 / 7
Path
pe:exe>scr:vbe>pe:exe>pe:rsrc>bin
Shape
pe:exe>scr:vbe>pe:exe>pe:rsrc>bin
malicious
5 nodes
Path
pe:exe>scr:vbe>pe:exe>bin
Shape
pe:exe>scr:vbe>pe:exe>bin
malicious
4 nodes
| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_b7757497.bin (1063618 bytes) |
| Info | PDB Path: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb |