Suspicious
Suspect

45750391919d02cc9fb9c239ea83fb2f

VBScript
MD5: 45750391919d02cc9fb9c239ea83fb2f
Size: 4.6 MB
text/vbscript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 45750391919d02cc9fb9c239ea83fb2f
Sha1 0008e4df4dfab612088c879ca70404e3f19a7da8
Sha256 3203cc93269b04a0fa1e7473fe80f489670e5b9c9c46a5bcfb7e9d896b48063f
Sha384 b70bd939386f903f5c60e4415d4a2ea3587ada2cf86a3fefaf02886363c27bdf8cdcd8b47bd57d9f11762b648b2cdd65
Sha512 c4611c9d7c22ea87c81002fa0ed5c8c09a54f536ddd4cbaa988bd1823bb6572b38c5b61e9060ec995770fecdcf84fbf5ee3cb229b9e4128b3386750b364565bd
SSDeep 49152:uhXH9ktlxeRwpD9n+jtIQwvEPXHP5he6/P:uhtkTwRwpD9n+twsPXb
TLSH 6E26281525C64227F4E705BEEB18B309DFADB4152FECF75FD15049BBAC220A2896027B
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLL
[Authenticode]_3205fb45.p7b
Overlay_44eac2c3.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.szgpcfh
.planpm
.apwhamw
.ynp
.gamjck
.xer
.ujzhqjt
.fjqg
.txfdv
.rsrc
Resources
RT_VERSION
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x461000 size 7272 bytes
Info
Overlay extracted: Overlay_44eac2c3.bin (1024 bytes)
[Authenticode]_3205fb45.p7b
Overlay_44eac2c3.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.szgpcfh
.planpm
.apwhamw
.ynp
.gamjck
.xer
.ujzhqjt
.fjqg
.txfdv
.rsrc
Resources
RT_VERSION
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙