Malicious
Malicious

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

The file 45e6c886a0d9e4379a8ea2396ad4d5ae is a PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 42 embedded or derived files. It matches 15 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
—
MD5
-
Verdict
Malicious
File type
PE Executable

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Encoded VBScript file
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation

4 malicious · 38 files
EXE45e6c886a0d9e4379a8ea2396ad4d5ae
Structure
VBSOverlay_ac1b6b8d.bin
EXEProviderBrowserCrt.exe
Structure
VBSiKBJHf58LGX5ru9XEmeY2YQv4ojboHCVmH3cP1qWhPv.vbe
BATn6iflZXIPybFhJARkZbR0FCqJxkO6x5GBimSMlTo5ubH2IiVu.bat
VBS45e6c886a0d9e4379a8ea2396ad4d5ae.decoded.vbs

Name Value
Info
Overlay extracted: Overlay_ac1b6b8d.bin (1642946 bytes)
Info
PDB Path: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb
An error has occurred. This application may no longer respond until reloaded. Reload 🗙