Malicious
VBScript
MD5: 6f1cac94ae8d19156d4e5b9195dbc3a8
Size: 15.29 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Corrupted Microsoft Office Document
Size
15.29 MB · 15,294,944 B
First seen
2026-07-11 07:01 · 3 months ago
Last seen
2026-07-11 07:01 · 3 months ago
Last analysis
2026-07-11 07:03 · 3 months ago
Hashes
MD5
6f1cac94ae8d19156d4e5b9195dbc3a8
Sha1
4650af8773928d573c84f4efe2930585cd1b4314
Sha256
34c37d16da934f0281861d55fd766ddac8e1860e9f62204bbb32cfb0052f51d7
Sha384
4656d222f96cac670f27d381c470465cb4df8e093d8a6037a276a7f3fae0a81f722f9e2f2a9f8b59dcc569bbbe85a2ff
Sha512
21cca66eb276a9051df15283df235b2416488af70b98c3c547cfcb79bac0b4d4486e962e7a64c1ff417d047d2725be504646ff9f617aa25f138371b51ec3ddee
SSDeep
196608:BISaERQ63Y74SD9KWUIOLFQSxnwldbNgtz8C:ZRf3gX97UIOLFCatQC
TLSH
C2F6D016650424AEC0EAC7768E27A417E736745573F1C9DB36AC8A0B0F27BD0EA3B711
Detection
PeID
Borland Delphi 4.0MASM/TASM - sig4 (h)Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12Private EXE Protector V2.30-V2.3X -> SetiSoft TeamRPolyCryptor V1.4.2 -> Vaska
6 malicious · 60 files
VBS6f1cac94ae8d19156d4e5b9195dbc3a8
Structure
OFF[Repaired @0x005F7084]
PDFPDF @0x00000C1A
P7B[Authenticode]_b6408219.p7b
BINResources
BINRT_CURSOR
BINRT_BITMAP
BINRT_ICON
BINRT_STRING
BINRT_RCDATA
BINID:0000
EXEID:1033
Structure
OFF[Repaired @0x0037F4F4]
PDFPDF @0x00000C1A
P7B[Authenticode]_e6cd8563.p7b
BINResources
OFFPDF @0x0029C706
BINRT_GROUP_CURSOR2
BINRT_GROUP_CURSOR4
BINRT_VERSION
BINRT_MANIFEST
OFFPDF @0x00514296
| Name | Value |
|---|---|
| Info | Authenticode present at 0xE93208 size 12248 bytes |