Suspicious
Suspect

5a5af76bd226a6bd24f9b157bd053069

Share on LinkedIn
Print
PE Executable
MD5: 5a5af76bd226a6bd24f9b157bd053069
Size: 1.27 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 5a5af76bd226a6bd24f9b157bd053069
Sha1 c873cc5a95ed0f8ba73d3462e275ef1b3669fb37
Sha256 b812cdb8e88e818a206ac067adbc9017ea3dcedb19544493858247a0cfa591dc
Sha384 0c1f7b5f642e4d0856b4f00dda895395ccd130257b1896dd7e6167224e465e2d3faa222eacdae422616ff9dc866e2d07
Sha512 76dc133a0fe2aa36c8872a334f46ded056ba54f71e70b358d0eb8d9d7c5a130d47d5cd9e3e9aab55f182165b8828c6fa6df5f0ec1a0b19886012c75058495bd7
SSDeep 24576:OReuectp9dCDX0wtJ+VHo2qFSasuIGD/zOX6WXaaKjhZZSY:O7CT3aRgSaJIIM6WUjhZZj
TLSH 57459E13B7C3C1A6DFA20AB2D47543371E7ABCA0173C99CB6641342EE871ED06A75B58
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
5a5af76bd226a6bd24f9b157bd053069
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
RT_MENU
ID:00D3
ID:1033
RT_DIALOG
ID:00CD
ID:1033
RT_ACCELERATOR
ID:00D4
ID:1033
RT_RCDATA
ID:0000
ID:1033
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
ID:1033
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Mcconfig.Resources.resources
RT_GROUP_CURSOR4
ID:009F
ID:1033
ID:00A0
ID:1033
ID:00CE
ID:1033
ID:00CF
ID:1033
ID:00D0
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Name Value
Info
PE Detect: PeReader OK (file layout)
URLs in VB Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙