Malicious
Malicious

5bb3aba2d2ec68c81d2cee27e5cd021b

PE Executable
|
MD5: 5bb3aba2d2ec68c81d2cee27e5cd021b
|
Size: 1.68 MB
|
application/x-dosexec

Print
Infection Chain
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
5bb3aba2d2ec68c81d2cee27e5cd021b
Sha1
9f0de4d49ed066a9f3aaa7f50ae9efffae968013
Sha256
dca9f79ee91afd62b1f113d8dcd96cc95b56fc98099afb31749dbd0393fab558
Sha384
6ce07d3b56ae90c45d150acf44e0e7fb386d0b07299df48b4a77d0fd5c5579c5cfab58dc6aa1525398e5329df5dff5b0
Sha512
a2de78824c6310b2f7e2a7793b7d9703ceae819f3366629d02fd9e27cc256e7d00a2bbf5c12f103f96e5f83e7d6ef8b9be47025e16e718e4e130977826f3a200
SSDeep
24576:u2G/nvxW3WieCJzOHXG6DO0H1iq7cUa/fU+awWr4DshhxpQR8g49r/o:ubA3jJz4192fUdwiSshLpQRYhA
TLSH
38759D017E84CE52F0192633C2FF494447B8AC502AA6E72B7EB9376D55123A37D1DACB

PeID

HQR data file
Microsoft Visual C++ 6.0 DLL (Debug)
Microsoft Visual C++ 7.0 - 8.0
Microsoft Visual C++ 8
Microsoft Visual C++ 8
Microsoft Visual C++ v6.0 DLL
VC8 -> Microsoft Corporation
File Structure
5bb3aba2d2ec68c81d2cee27e5cd021b
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.didat
.rsrc
.reloc
Resources
PNG
ID:0065
ID:1033
ID:1033-preview.png
ID:0066
ID:1033
ID:1033-preview.png
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
RT_DIALOG
ID:0000
ID:1033
RT_STRING
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
ID:000D
ID:1033
ID:000E
ID:1033
ID:000F
ID:1033
ID:0010
ID:1033
RT_GROUP_CURSOR4
ID:0064
ID:1033
RT_MANIFEST
ID:0001
ID:1033
5bb3aba2d2ec68c81d2cee27e5cd021b.decoded.vbs
Malicious
5bb3aba2d2ec68c81d2cee27e5cd021b.decoded.vbs.deobfuscated.vbs
Malicious
5bb3aba2d2ec68c81d2cee27e5cd021b (1.68 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙