Suspect
790face14452f40c78304ec337c405ac
VB5/6 Executable | MD5: 790face14452f40c78304ec337c405ac | Size: 235.69 KB | application/x-dosexec
VB5/6 Executable
MD5: 790face14452f40c78304ec337c405ac
Size: 235.69 KB
application/x-dosexec
Summary by MalvaGPT
Characteristics
|
Hash | Hash Value |
|---|---|
| MD5 | 790face14452f40c78304ec337c405ac
|
| Sha1 | 55a47f3518e656f424d2f0ff2ae9918533c90c16
|
| Sha256 | c59ca57605f1547bb03591cbd516c45857654c35dfcfe5a4105ffa1fa0d48b71
|
| Sha384 | 5716bdb16243893e1b63f742fa14d81e8a6992438a712b4d687b64c77620b30736317f3ee87be0a1826ad481860a740a
|
| Sha512 | e5ef14393f922da60a608458ece2282097871105e2a0c9bd83cd3d3e7c8a6370f16d5f49b0cf22a99c8eeaafa1698c0ef7f242cef4197427ac06ee05abe34273
|
| SSDeep | 6144:VONUtemwXjg7WawYfQGqGgvyXe31bXbeO:5K05ESO3VX
|
| TLSH | 24346A28F19EE13FD13089B52D141FDC11F985B9F0C6AA0AD2516B3A27B09B27F7D606
|
PeID
Microsoft Visual Basic v5.0
Microsoft Visual Basic v5.0
Microsoft Visual Basic v5.0 - v6.0
File Structure
790face14452f40c78304ec337c405ac
Overlay_d6702f85.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rsrc
Resources
RT_ICON
ID:7531
ID:0
ID:7532
ID:0
ID:7533
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
VB6 Structure
VB Header
VB VBAProject Info
VB Object Table
VB VBAProject Info 2
VB Register Info
Informations
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Overlay extracted: Overlay_d6702f85.bin (186536 bytes) |
790face14452f40c78304ec337c405ac (235.69 KB)
File Structure
790face14452f40c78304ec337c405ac
Overlay_d6702f85.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rsrc
Resources
RT_ICON
ID:7531
ID:0
ID:7532
ID:0
ID:7533
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
VB6 Structure
VB Header
VB VBAProject Info
VB Object Table
VB VBAProject Info 2
VB Register Info
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.