Malicious PE Executable analysis – 61bb1b6d672d

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

File

Type

Portable Executable file

Detection

PeID

MEW 11 SE 1.2Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation

6 malicious · 101 files

EXE61bb1b6d672d6ce0f7331fee7de6f553

Structure

RAROverlay_cf0d754e.bin

HSQxaji.hsq

DASfxmp.das

VBSafrilxb.3gp

PS1[PowerShell Command]

PS1[Deobfuscated PS]

BIN[Base64-Block]

VBScxip.vbe

EXEdetuxnpa.icm

TXTgkrleiw.txt

DOCXrkljixdcik.docx

ICMtlblo.icm

DOCXbilvmenvxn.docx

PPTdvcglsw.ppt

ICMnvwtddt.icm

PDFhgfmhc.pdf

ICMhlow.icm

DOCXbalaqi.docx

PDFpulad.pdf

ICMavxbsdfcgf.icm

PDFjisoat.pdf

BINswfgsudj.bin

MP3wtmvb.mp3

ICMpmudmmnpv.icm

TXTpnhnj.txt

JPGthnkgxg.jpg

PPTsqlsjjrm.ppt

DASfxbmrutg.das

MP3xrjoxle.mp3

DASgabll.das

PPTgnhv.ppt

JPGfhcewaam.jpg

MP2cggfxor.mp2

XLwvrwur.xl

PPTgafd.ppt

BINResources

Name	Value
Info	Overlay extracted: Overlay_cf0d754e.bin (788945 bytes)
Info	PDB Path: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb