Malicious
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
The file 5aa3659d8379d7df25723ec91b4c4948 is a PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 38 embedded or derived files. It matches 13 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- —
- MD5
- -
- Verdict
- Malicious
- File type
- PE Executable
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Encoded VBScript file
Detection
PeID
HQR data fileMicrosoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
4 malicious · 34 files
EXE5aa3659d8379d7df25723ec91b4c4948
Structure
VBSOverlay_b12052d3.bin
BATjt8xO24p5NQDb5Q9aCeJAGLTHcI6x.bat
EXEmsChain.exe
Structure
BINResources
BIN.Net Resources
VBSTJIPXZ1yt.vbe
BINResources
VBS5aa3659d8379d7df25723ec91b4c4948.decoded.vbs
| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_b12052d3.bin (847999 bytes) |
| Info | PDB Path: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb |