Suspicious
Suspect

55250bd005f1787aa7d844db1fbca7fa

AutoIt Compiled Script
|
MD5: 55250bd005f1787aa7d844db1fbca7fa
|
Size: 1.23 MB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
55250bd005f1787aa7d844db1fbca7fa
Sha1
966490beb543f9462ff88386e2ac33f8efc1ff99
Sha256
47c407f3f99e7b5c65fcfb454f10828c08f431884336ce5c5c90c9b3a903d819
Sha384
c5a9b983e78da0780d5b80b1820a1a7ee99c1c6ee11154765c04d9bd61a4f24e422dfaaf1bd5c5ec44c494541e16347b
Sha512
b46cd85ebc3b354ba62d4ec9515d262d3ca032705302aa369f23bac030564ba9cd635b30df74414a0fbc52d80372ac352b5909a1f9bbd2f63a49774cb8b6afd9
SSDeep
24576:0jN8+9Pze/qiXsa8A9U85zmcCdYcaKm1OJ/R8FVOwqXvn9ic9GU5S41wmA:0jDzeCiXkKU8AbZm1Oz8FVOx4CN1wd
TLSH
794523537BE4267BD4B647B668F10393E530FA622B6C54BF21A4D0FC4B23AC8A131B55

PeID

Microsoft Visual C++ 8.0 (DLL)
File Structure
55250bd005f1787aa7d844db1fbca7fa
[Authenticode]_0f7ba765.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
AVI
ID:0BB9
ID:1033
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
RT_DIALOG
ID:07D1
ID:1033
ID:07D2
ID:1033
ID:07D3
ID:1033
ID:07D4
ID:1033
ID:07D5
ID:1033
ID:07D6
ID:1033
RT_STRING
ID:0050
ID:1033
ID:0053
ID:1033
ID:0055
ID:1033
RT_RCDATA
ID:0000
ID:1033
RT_GROUP_CURSOR4
ID:0BB8
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Coated.docm
Incredible
Improve
Appreciated
Torture
Admin
Moved
Gd
Dress
Customer
Tourism
Contributing
Laser.docm
Waste.docm
Waiver.docm
Homeland.docm
Payments.docm
Incredible
Improve
Appreciated
Torture
Admin
Moved
Gd
Dress
Customer
Tourism
Contributing
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

Authenticode present at 0x12A000 size 9768 bytes
Info

PDB Path: wextract.pdb
55250bd005f1787aa7d844db1fbca7fa (1.23 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙