Suspicious
Suspect

5f17f3870138485e7394e148c28ba4b4

VB5/6 Executable
|
MD5: 5f17f3870138485e7394e148c28ba4b4
|
Size: 221.88 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
5f17f3870138485e7394e148c28ba4b4
Sha1
e962a26991a32a52963bb183c645dda8a4861b2a
Sha256
63db2355a7bac3041f68665849fb61987d4f8084d1b7b25a0850bf458ce41f95
Sha384
3d29c495fa53202a61330fa72c037a228f67c4bab6070308ad07a105306bb2f618ecfa07e83be461a46e7c9fdadc1bbc
Sha512
119fee7a4f1d74bbe635767407aae3a3a8c6107cc13b4e3ed02b3f7d8ad95a18239aa4bfc8ddae47a13268f530a9c7f75479debf7be872ca2bed87c27040d455
SSDeep
3072:3vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6u4Pmuv:3vEN2U+T6i5LirrllHy4HUcMQY6V
TLSH
08242C1BFB40302AE05786F02866A9F7B5212D311B41FC0BA7A1AF4A75B5623B5F531F

PeID

Microsoft Visual Basic v5.0 - v6.0
Protect Shareware V1.1 -> eCompserv CMS
File Structure
5f17f3870138485e7394e148c28ba4b4
Overlay_bda3c908.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
Resources
RT_ICON
ID:7531
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
VB6 Structure
VB Header
VB VBAProject Info
VB Object Table
VB VBAProject Info 2
VB Register Info
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

Overlay extracted: Overlay_bda3c908.bin (24757 bytes)
5f17f3870138485e7394e148c28ba4b4 (221.88 KB)
File Structure
5f17f3870138485e7394e148c28ba4b4
Overlay_bda3c908.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
Resources
RT_ICON
ID:7531
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
VB6 Structure
VB Header
VB VBAProject Info
VB Object Table
VB VBAProject Info 2
VB Register Info
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙