Suspicious
Suspect

654607f31a256d943a2de9b63b30929c

VBScript
MD5: 654607f31a256d943a2de9b63b30929c
Size: 493.06 KB
text/vbscript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 654607f31a256d943a2de9b63b30929c
Sha1 679fb2dbfe81808a883729d15cd03b99eda8d1ba
Sha256 f35b6cb6af991bfa735e039f6bc0e49c69759c015a2074b87eed8f20e4200135
Sha384 6c0f29da2aef7b502d775e7e77c2c59f1187e6f7f1385e582efbd3c9c639b36a8771498e93532d95effeeae928cbc718
Sha512 2822fbb2e856bf2a2f85c0da108d4feb47ad6dedf06242855c3cc3d8c5675773f247b06af35ed02937be087531c02b2be8aaed624ea866d8f5cfb5fd96af6e74
SSDeep 12288:/13ak/mBXTG4/1v08KI7ZnMEF76JqmsvZQmS:tak/mBXTV/R0nEF76gFZZ
TLSH 94A4BF01BAD2C072D57654300C3AE775DEBDBD212839897BB3D61D97FD30190A63AAB2
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft CorporationZProtect v1.4.6 -> * Sign by phpbb3
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:007B
ID:1033
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: t$di
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:007B
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙