Suspicious
Suspect

5a5af76bd226a6bd24f9b157bd053069

PE Executable
MD5: 5a5af76bd226a6bd24f9b157bd053069
Size: 1.27 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 5a5af76bd226a6bd24f9b157bd053069
Sha1 c873cc5a95ed0f8ba73d3462e275ef1b3669fb37
Sha256 b812cdb8e88e818a206ac067adbc9017ea3dcedb19544493858247a0cfa591dc
Sha384 0c1f7b5f642e4d0856b4f00dda895395ccd130257b1896dd7e6167224e465e2d3faa222eacdae422616ff9dc866e2d07
Sha512 76dc133a0fe2aa36c8872a334f46ded056ba54f71e70b358d0eb8d9d7c5a130d47d5cd9e3e9aab55f182165b8828c6fa6df5f0ec1a0b19886012c75058495bd7
SSDeep 24576:OReuectp9dCDX0wtJ+VHo2qFSasuIGD/zOX6WXaaKjhZZSY:O7CT3aRgSaJIIM6WUjhZZj
TLSH 57459E13B7C3C1A6DFA20AB2D47543371E7ABCA0173C99CB6641342EE871ED06A75B58
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
RT_MENU
ID:00D3
ID:1033
RT_DIALOG
ID:00CD
ID:1033
RT_ACCELERATOR
ID:00D4
ID:1033
RT_RCDATA
ID:0000
ID:1033
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
ID:1033
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Mcconfig.Resources.resources
RT_GROUP_CURSOR4
ID:009F
ID:1033
ID:00A0
ID:1033
ID:00CE
ID:1033
ID:00CF
ID:1033
ID:00D0
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Name Value
Info
PE Detect: PeReader OK (file layout)
URLs in VB Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
RT_MENU
ID:00D3
ID:1033
RT_DIALOG
ID:00CD
ID:1033
RT_ACCELERATOR
ID:00D4
ID:1033
RT_RCDATA
ID:0000
ID:1033
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
ID:1033
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Mcconfig.Resources.resources
RT_GROUP_CURSOR4
ID:009F
ID:1033
ID:00A0
ID:1033
ID:00CE
ID:1033
ID:00CF
ID:1033
ID:00D0
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
URLs in VB Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
5a5af76bd226a6bd24f9b157bd053069
URLs in VB Code - #2 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
5a5af76bd226a6bd24f9b157bd053069
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙