Suspicious
Suspect

724ca906659e3e1e5af6eeca909fd2b3

VBScript
MD5: 724ca906659e3e1e5af6eeca909fd2b3
Size: 5.11 MB
text/vbscript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 724ca906659e3e1e5af6eeca909fd2b3
Sha1 02e76094f57b136cca3d1fe24c27cc65e17b4039
Sha256 f2bc804a84dfb3717534856402c6d6959d33d62dfdf7ca990e210f093da1318f
Sha384 1b8f26b3c644ceba89ef5124449708f4664e7c5b386eaf3755b7ef6cbcccb9faa6cfd8fc5b8d7ce6c38cb183293288c2
Sha512 b79e969799d6a49e6eec856c257e95101b7d2bd04b72d7ba20e5cb8a7fc75b6f52dc16586c18f946a7dc42b9329e380ca8753a337c247d417081d1e501849a22
SSDeep 98304:G5OCIXKQsDDfiXfedkmJZDXOPJWlRKLJykh/BVb7TgekQs:KRYyDpuxWlR8tnUek7
TLSH 6936123FB28B753EE06E1A397A76E210583BB66165574C1696F4C88CCF250B01E3E787
PeID
Borland Delphi 7 - Nstd EP - ASL sign Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12
[Authenticode]_4be23703.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.itext
.data
.bss
.idata
.didata
.edata
.tls
.rdata
.reloc
.rsrc
Resources
RT_ICON
ID:0064
ID:1033
ID:1033-preview.png
ID:0065
ID:1033
ID:1033-preview.png
ID:0066
ID:1033
ID:1033-preview.png
ID:0067
ID:1033
ID:1033-preview.png
ID:0068
ID:1033
ID:1033-preview.png
ID:0069
ID:1033
ID:1033-preview.png
ID:006A
ID:1033
ID:1033-preview.png
RT_STRING
ID:0FF5
ID:0
ID:0FF6
ID:0
ID:0FF7
ID:0
ID:0FF8
ID:0
ID:0FF9
ID:0
ID:0FFA
ID:0
ID:0FFB
ID:0
ID:0FFC
ID:0
ID:0FFD
ID:0
ID:0FFE
ID:0
ID:0FFF
ID:0
ID:1000
ID:0
RT_RCDATA
ID:0000
ID:0
ID:2B67
ID:1033
RT_GROUP_CURSOR4
ID:0000
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x4DE108 size 7240 bytes
[Authenticode]_4be23703.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.itext
.data
.bss
.idata
.didata
.edata
.tls
.rdata
.reloc
.rsrc
Resources
RT_ICON
ID:0064
ID:1033
ID:1033-preview.png
ID:0065
ID:1033
ID:1033-preview.png
ID:0066
ID:1033
ID:1033-preview.png
ID:0067
ID:1033
ID:1033-preview.png
ID:0068
ID:1033
ID:1033-preview.png
ID:0069
ID:1033
ID:1033-preview.png
ID:006A
ID:1033
ID:1033-preview.png
RT_STRING
ID:0FF5
ID:0
ID:0FF6
ID:0
ID:0FF7
ID:0
ID:0FF8
ID:0
ID:0FF9
ID:0
ID:0FFA
ID:0
ID:0FFB
ID:0
ID:0FFC
ID:0
ID:0FFD
ID:0
ID:0FFE
ID:0
ID:0FFF
ID:0
ID:1000
ID:0
RT_RCDATA
ID:0000
ID:0
ID:2B67
ID:1033
RT_GROUP_CURSOR4
ID:0000
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙