Suspicious
Suspect

538b58d3c4ee7c12821b09e47ec23e7b

Share on LinkedIn
Print
PE Executable
MD5: 538b58d3c4ee7c12821b09e47ec23e7b
Size: 185.84 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 538b58d3c4ee7c12821b09e47ec23e7b
Sha1 504703d499b6e4137d1fb77890d0c47d277e43be
Sha256 bf93102794875d4338c669b64fc0ba88b23e7a494304b7b4b2fb9e1f46feec52
Sha384 2b08b41a3ef796b03098ed3f86139e6fa26fc637c54a28e50ebbb62d490909ead6059387a727b2f2820851f5c69a9bca
Sha512 e1899d5991c1a99bf2bfbbc768b7736a18cd757d8d32f462f7af7bf820e0f9eaf6ee292ec1d1bd424320f5280cb803976768fe18b7fc0549b533f442a6dc1439
SSDeep 3072:MCT00JJ1dVFc3SMBvmi9qa6RT5vXTl+flAxVQ3hZjmOLvGlSQ9HKkTJnnR13O:mWVFc3S8vmipglvaAnQ3htmOrG0QhpnW
TLSH 7C0412C765769CE8DCBA5DF1E4475D966DF1EEB36032AB061232301C58B9B0B9E00E87
PeID
Netopsystems FEAD Optimizer 1Packer=UPX Compresor..Gratuito... www.upx.sourceforge.netUPX -> www.upx.sourceforge.netUPX 2.90 (LZMA)UPX exe - NRV2E/7 compression (32 bit ) ASL sign UPX v0.80 - v0.84UPX v1.25 (Delphi) StubUPX v2.0 -> Markus, Laszlo & ReiserUPX v3.0
538b58d3c4ee7c12821b09e47ec23e7b
7z-stream @ 0x0000F659.7z
logo.bmp
icon1.ico
icon2.ico
icon3.ico
helpdesk.txt
winvnc.exe
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.rdata
.data
.rsrc
Resources
RT_BITMAP
ID:008B
ID:2067
RT_ICON
ID:0001
ID:2067
ID:0002
ID:2067
RT_MENU
ID:0068
ID:1033
RT_DIALOG
ID:0065
ID:1033
ID:0066
ID:1033
ID:0083
ID:1033
ID:008C
ID:1033
ID:0092
ID:1033
RT_STRING
ID:0007
ID:1033
ID:0A03
ID:1033
ID:0A04
ID:1033
ID:0A05
ID:1033
ID:0A06
ID:1033
RT_GROUP_CURSOR4
ID:0066
ID:2067
ID:0086
ID:2067
RT_VERSION
ID:0001
ID:1033
Overlay_7d9283d6.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:03E8
ID:0
RT_DIALOG
ID:01F4
ID:1033
RT_STRING
ID:0001
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:009F
ID:1033
RT_VERSION
ID:0001
ID:1033
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_7d9283d6.bin (122861 bytes)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙