Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
PeID
Installer Nullsoft PiMP Stub v.3.0.x - A.S.L Microsoft Visual C++ v6.0 DLL
6218ff81ea0f773888a18667b5917f04
[NSIS Installer] @ #00079808
nsDialogs.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_DIALOG
ID:0001
ID:1033
System.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.reloc
Elita.Law
Adicity.boa
Pedicels.Nom
Dobbs206.ini
Fngselsvseners1.spr
Gaussfunktionernes232.txt
Geriatrics.eme
Maksimumsstraffene146.sto
Motiverende.txt
Pakprotector.pac
Pochote.kys
Similary.txt
Sphaerocarpus.txt
amsonia.txt
anisotropic.ini
envined.unf
fnikere.dis
gratineredes.bla
grillbar.and
gstelrervirksomheder.txt
misprizer.txt
naturlighedens.ini
ordrebeholdningernes.stu
pantelegens.txt
redressive.ecc
schmelzes.omd
tritheist.jpg
tritheist.jpg-preview.png
tuberousness.eks
[SETUP_DECOMPILED.NSI]
[Authenticode]_658880cd.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
RT_DIALOG
ID:0069
ID:1033
ID:006A
ID:1033
ID:006B
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0xD8E90 size 2416 bytes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙