71947d95ac64782101ba0ccf8d6bea36

VBScript

MD5: 71947d95ac64782101ba0ccf8d6bea36

Size: 4.66 MB

text/vbscript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

Symbol Obfuscation Score Low

MD5	71947d95ac64782101ba0ccf8d6bea36
Sha1	c7fbfd2621121c8e655b25bea4f99711aa6cf70b
Sha256	c73b8cb9c3a35b29d83749da7530033f036cc1cbd7b52d442f35b39e4b1cbae9
Sha384	5f04ba14f41f3f549f0e26058885ca6b331c3cd7c638239cdabc9f8c89831fa1cd9d49c56d46d998b605d47bf01641aa
Sha512	2a20616ba451256f72a25b84350873aeedfdea392dc6a3a8eb02feb0d41817a8119d0ac9da9e36649f6bf2a596147f19685da5ebbb7cf19f904c38acee0a6c3e
SSDeep	98304:VYTwTwTtTRTuT2gHFhhoEITUTHdfgdiPoT:VIglhyETdfgdiP
TLSH	F2266C102A47C809D16D0230D03CB2FB01766E04D77A95FF6C9A7E6AF471B4E4AAE6D7

PeID

Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ v6.0 DLL

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 11 STICH kept: 1secondary ignored: 10

bin 8img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>rtf

Shape pe:exe>rtf

2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	`PDB Path: C:\Users\hoffm\OneDrive\Desktop\camaleonpatcher_vb\obj\Release\net35\CamaleonPatcher.pdb`
Module Name	CamaleonPatcher.exe
Full Name	CamaleonPatcher.exe
EntryPoint	System.Void CamaleonPatcher.My.MyApplication::Main(System.String[])
Scope Name	CamaleonPatcher.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v2.0.50727
Tables Header Version	512
WinMD Version	<null>
Assembly Name	CamaleonPatcher
Assembly Version	1.0.0.4
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	1787
Main Method	System.Void CamaleonPatcher.My.MyApplication::Main(System.String[])
Main IL Instruction Count	6
Main IL	`call System.Boolean Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase::get_UseCompatibleTextRendering() call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) call CamaleonPatcher.My.MyApplication CamaleonPatcher.My.MyProject::get_Application() ldarg.0 <null> callvirt System.Void Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase::Run(System.String[]) ret <null>`

No malware configuration was found at this point.

You must be signed in to view YARA rules.