Suspicious
Suspect

654607f31a256d943a2de9b63b30929c

Share on LinkedIn
Print
VBScript
MD5: 654607f31a256d943a2de9b63b30929c
Size: 493.06 KB
text/vbscript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 654607f31a256d943a2de9b63b30929c
Sha1 679fb2dbfe81808a883729d15cd03b99eda8d1ba
Sha256 f35b6cb6af991bfa735e039f6bc0e49c69759c015a2074b87eed8f20e4200135
Sha384 6c0f29da2aef7b502d775e7e77c2c59f1187e6f7f1385e582efbd3c9c639b36a8771498e93532d95effeeae928cbc718
Sha512 2822fbb2e856bf2a2f85c0da108d4feb47ad6dedf06242855c3cc3d8c5675773f247b06af35ed02937be087531c02b2be8aaed624ea866d8f5cfb5fd96af6e74
SSDeep 12288:/13ak/mBXTG4/1v08KI7ZnMEF76JqmsvZQmS:tak/mBXTV/R0nEF76gFZZ
TLSH 94A4BF01BAD2C072D57654300C3AE775DEBDBD212839897BB3D61D97FD30190A63AAB2
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft CorporationZProtect v1.4.6 -> * Sign by phpbb3
654607f31a256d943a2de9b63b30929c
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:007B
ID:1033
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: t$di
An error has occurred. This application may no longer respond until reloaded. Reload 🗙