Suspicious
Suspect

5b25e9760857562e29e323a414cac5a4

VB5/6 Executable
|
MD5: 5b25e9760857562e29e323a414cac5a4
|
Size: 1.91 MB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
5b25e9760857562e29e323a414cac5a4
Sha1
e9d8186378e11d7d0b36004a63ea18fddd9a2c60
Sha256
a56471a8ae7e25b0114659b58771838d0f1dbeb4e1f0e562cc50202372fd3273
Sha384
424f1244631e712528dfee609961e990bdd8dccff74d8b83cb42d781f54e13f8d18ae95a50796c9a892b9f9cbeb8537c
Sha512
d4506d9f46fa8e4bbba48bd48e4b44d8a1363518308eec2f50a33c890ca08a5645f77f57d2342db342770abbbc6e6401f822cdb26f1b56b96b69476b6ba088ba
SSDeep
24576:K5xolYQY6c4aAGEc6iG+Vr4cQwheInXzYQRSv3jxeP1kzltpgoI3luO5JPPnsb:dY2dL0zXRg3jxetk5t653AkJnnsb
TLSH
8595CF25A2C0453ED22255B5CC2BD7C6A8197E212B147A5F77DDDB483BF92833C3621B

PeID

Microsoft Visual Basic v5.0 - v6.0
Microsoft Visual C++ v6.0 DLL
Pe123 v2006.4.4-4.12
Protect Shareware V1.1 -> eCompserv CMS
File Structure
5b25e9760857562e29e323a414cac5a4
Overlay_447f2c89.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rsrc
.tdata
Resources
RT_ICON
ID:7531
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
VB6 Structure
VB Header
VB VBAProject Info
VB Object Table
VB VBAProject Info 2
VB Register Info
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

Overlay extracted: Overlay_447f2c89.bin (1655835 bytes)
5b25e9760857562e29e323a414cac5a4 (1.91 MB)
File Structure
5b25e9760857562e29e323a414cac5a4
Overlay_447f2c89.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rsrc
.tdata
Resources
RT_ICON
ID:7531
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
VB6 Structure
VB Header
VB VBAProject Info
VB Object Table
VB VBAProject Info 2
VB Register Info
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙