Malicious
Malicious

6f00a637e471650b1afc93f21bd6a050

PE Executable
|
MD5: 6f00a637e471650b1afc93f21bd6a050
|
Size: 7 MB
|
application/x-dosexec

Print
Infection Chain
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
6f00a637e471650b1afc93f21bd6a050
Sha1
e242b871df8cbda146d657a6efd2696e2f477458
Sha256
c7ae3ef1f6321bbee623fc191d7708ed7d4208537ac76fffc925c997be3064fe
Sha384
0c808fafda44d3fc60a71d3b981d9d677537f124d78aaf848b0d99c38ca48f82a0a9712123084644fab0a4a0216c1cb5
Sha512
70727b15adff9baac016abb38fc23be17b545117be81d9af464f5fd0aacc4d10765ef1f6d7b7db5736fcde35e037775e36eb78f5113d45ba7451626e8c103624
SSDeep
196608:gHUqET1xMUrsyB4+sk2US34oXBQxrRmYrFvgw:wUqET1xLw+sk2US34e0rgUFd
TLSH
6D6601037E948911E01A1E33C2BF47144774AD106AA6E7177AB9376DD8F13E27C19ACB

PeID

Borland Delphi 7 - Nstd EP - ASL sign
HQR data file
Microsoft Visual C++ 6.0 DLL (Debug)
Microsoft Visual C++ 7.0 - 8.0
Microsoft Visual C++ v6.0 DLL
File Structure
6f00a637e471650b1afc93f21bd6a050
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
CODE
DATA
BSS
.idata
.tls
.rdata
.reloc
.rsrc
Resources
RT_RCDATA
ID:0000
ID:0
Overlay_203a045c.bin
Malicious
9Cq5cGmXFtHZz82T9bvCAFzuVi8d.bat
MsDll.exe
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.sdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
.Net Resources
ukETySl90sDM3doa4p.eRbjDj8VaBMLpaW0Xk
GkDsluHQtdd90KADUY.RHFCuZSy6yAaOeCSPC
vTteIXKDOJn.vbe
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.didat
.rsrc
.reloc
Resources
PNG
ID:0065
ID:1033
ID:1033-preview.png
ID:0066
ID:1033
ID:1033-preview.png
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
RT_DIALOG
ID:0000
ID:1033
RT_STRING
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
ID:000D
ID:1033
ID:000E
ID:1033
ID:000F
ID:1033
ID:0010
ID:1033
RT_GROUP_CURSOR4
ID:0064
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Root Entry
䡀䆒䑲
䡀䌏䈯
䓤䞳䄦䠥
Path
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.taubndl
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:7F00
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
PathFile_I02fd8ce0475a47329646ac5946c911af
PathFile_I0363ce7e275448e7a90b4f9f07cfc1a2
PathFile_I06ecb8cf8ddf407d8a2eec7d9aedf5d0
PathFile_I1bb5bb58441e42a1bf57057ee491c825
PathFile_I1f6493bcdec64eb781b7eb6d6bf4adc0
PathFile_I2467edaeb89b4a94ba7f16ab332c62e0
PathFile_I38e8aabda4714555a95ace06544666f1
PathFile_I6a1c313e4a044b189cd5719d765bf3e7
PathFile_I75a43e30d6f8448d96977f1e260cc40b
PathFile_I8384bf500fd04679ab070b113282e6fb
PathFile_I83d34a1a8fdf4c4f8f584e4be2e4cd36
PathFile_I9d96a5f87aff47fc98f3a0fdb4e0d652
PathFile_Iba9e3df2737a4d70afc351143219b521
PathFile_Ic213a57360db47a8bf8a778caaa74660
PathFile_Ie066b948ee3c4184a1fa8a56d87391f9
PathFile_Ie12ec55286074771b2c2f7942ea6f9c3
PathFile_Ie7377363a17b4bb8b6eb070880d4fe35
PathFile_Iea9d7385ec4b44358117dafdddb9425b
PathFile_Ieb4a16a1749c4c25862bf239debd4abd
PathFile_If931e95c10284448a1c2992a6b89a188
䡀㲞䈝䗻
䡀䈖䌧䠤
䡀䌋䄱䜵
䡀䌍䏤䊲
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䈛䌪䗶䜵
䡀䋌䆨㫮䛲
䡀䋜䕲䆷䗸
䡀䒌䗱䒵䠯
䡀䓞䕪䇤䠨
䡀䕙䓲䕨䜷
䡀䈛㵪䆲䗤䕲
䡀䈛䒰䈹䌏䈯
䡀䈝䗻䗜䏼䠨
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀䓊㼳䄨䆵䠫
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䄛䌧㫲䗸䒷䠱
䡀䒌䗱䒵㮯䈹䗱
䡀䕌䄨䈷䒏䇯䕨
䡀䖖㯬䏬㱨䖤䠫
䡀䘌䗶䐲䆊䌷䑲
䡀䙎䑨㶷䓤䌳䊱
䆒䑲㹾䒵䘧䗦䆒䑲
䌋䄱䜵䀾䛬㲞䌠䆻䠤
[Authenticode]_ddcfac7b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䡀䒌䗱䒵㬯䑲䌧䌷䑲
䌋䄱䜵䀾䛬㲞㫿䓰㷿䚨
䌋䄱䜵䀾䛬㲞㫿䓰㾿䠳
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䌋䄱䜵䀾䛬㲞㲿䒦㲿䉱䠲
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䡀䖖㼬䒫䗵䘦㹷䒵䈳䗵䠼
䌋䄱䜵䀾䛬㲞㫿䓰㫿䑤䈱䠵
䌋䄱䜵䀾䛬㲞㫿䓰㭿䄬䒯䠪
䌋䄱䜵䀾䛬㲞㲿䒦㮿䆻䄯䠰
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
SummaryInformation
6f00a637e471650b1afc93f21bd6a050.decoded.vbs
Malicious
Path
PathFile_I02fd8ce0475a47329646ac5946c911af
PathFile_I0363ce7e275448e7a90b4f9f07cfc1a2
PathFile_I06ecb8cf8ddf407d8a2eec7d9aedf5d0
PathFile_I1bb5bb58441e42a1bf57057ee491c825
PathFile_I1f6493bcdec64eb781b7eb6d6bf4adc0
PathFile_I2467edaeb89b4a94ba7f16ab332c62e0
PathFile_I38e8aabda4714555a95ace06544666f1
PathFile_I6a1c313e4a044b189cd5719d765bf3e7
PathFile_I75a43e30d6f8448d96977f1e260cc40b
PathFile_I8384bf500fd04679ab070b113282e6fb
PathFile_I83d34a1a8fdf4c4f8f584e4be2e4cd36
PathFile_Ic213a57360db47a8bf8a778caaa74660
PathFile_Ie066b948ee3c4184a1fa8a56d87391f9
PathFile_Ie12ec55286074771b2c2f7942ea6f9c3
PathFile_Ie7377363a17b4bb8b6eb070880d4fe35
PathFile_Iea9d7385ec4b44358117dafdddb9425b
PathFile_Ieb4a16a1749c4c25862bf239debd4abd
PathFile_If931e95c10284448a1c2992a6b89a188
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
6f00a637e471650b1afc93f21bd6a050 (7 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙