Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
PeID
Armadillo v2.xx (CopyMem II)Microsoft Visual C++ 6.0 - 8.0Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 7.1Microsoft Visual C++ v6.0 DLLMicrosoft Visual C++ v7.0
548488410b5fdabb1202d1166a420c74
7z-stream @ 0x0015D816.7z
16data.exe
[Authenticode]_dde65375.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_GROUP_CURSOR4
ID:0000
ID:1033
setup223.exe
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
Resources
RT_ICON
ID:0001
ID:2052
ID:0002
ID:2052
ID:0003
ID:2052
ID:0004
ID:2052
RT_DIALOG
ID:0064
ID:2052
ID:0066
ID:2052
RT_STRING
ID:0007
ID:2052
RT_GROUP_CURSOR4
ID:0080
ID:2052
ID:0081
ID:2052
ID:0082
ID:2052
ID:0085
ID:2052
RT_VERSION
ID:0001
ID:2052
RT_DLGINIT
ID:0066
ID:2052
Overlay_03a5f71c.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
flag_dat
.rsrc
Resources
SCRIPT
ID:0065
ID:2052
ID:0067
ID:2052
RT_ICON
ID:0032
ID:0
ID:0-preview.png
RT_DIALOG
ID:271B
ID:2052
ID:271C
ID:2052
ID:271D
ID:2052
ID:271E
ID:2052
ID:2720
ID:2052
ID:2723
ID:2052
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:2052
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_03a5f71c.bin (905064 bytes)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙