Malicious
82454d9f0d4b22bc8357285e8397ee3a
PE Executable
MD5: 82454d9f0d4b22bc8357285e8397ee3a
Size: 1.17 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Encoded VBScript file
Size
1.17 MB · 1,165,993 B
First seen
2026-08-25 18:15 · 2 months ago
Last seen
2026-08-25 18:15 · 2 months ago
Last analysis
2026-08-25 18:15 · 2 months ago
Hashes
MD5
82454d9f0d4b22bc8357285e8397ee3a
Sha1
f8a6f532ba303705606a91a2416e09e8f4cc7263
Sha256
9c19c3b393c667beccc02574abdeb3e5b4793bb49550daadeab78af2e45cc97f
Sha384
3ab63b68c90f725951a30f4106882341a2c9bc10d84b53724e2f4b5daab332c8c690fb0de14d735b0e51027d46a527e9
Sha512
0cd480a63d1e38d2b414358dbb4f5559cb0d3b5bb1993174089c4ff259ef88b359a392a8dd2ef750e23184e99235eb22296fe81e9a0ac235eeeeaac52ba2189a
SSDeep
24576:u2G/nvxW3WieCLmsz7lHfqBRKlqqNyucQQTES:ubA3jLmsXcMEucpd
TLSH
43455B027E44CE11F0191633C2FF458457B4AC512AA6E72BBEBA376E95123937C1DACB
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
4 malicious · 34 files
EXE82454d9f0d4b22bc8357285e8397ee3aT1059.005
Structure
VBSOverlay_2cc51d3d.bin
BATPuu88KnJrp3KQLLKLa874En.bat
EXEPortwinruntime.exe
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
BIN.Net Resources
BINvbg8eLaxDsfHoXNjZv.VLluMVqAeYP90x9WwZ
BINBKJADYRp70U3soYqPf.ycPvvCGR10nPVANWnj
VBSysrZEeZ4bXfrtxTRBXu1TlgUg1ug.vbe
BINResources
BINPNG
BINID:0065
IMGID:1033
IMGID:1033-preview.png
BINID:0066
IMGID:1033
IMGID:1033-preview.png
BINRT_ICON
BINID:0001
BINID:1033
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINID:0006
BINID:1033
BINID:0007
IMGID:1033
IMGID:1033-preview.png
BINRT_DIALOG
BINID:0000
BINID:1033
BINRT_STRING
BINID:0007
BINID:1033
BINID:0008
BINID:1033
BINID:0009
BINID:1033
BINID:000A
BINID:1033
BINID:000B
BINID:1033
BINID:000C
BINID:1033
BINID:000D
BINID:1033
BINID:000E
BINID:1033
BINID:000F
BINID:1033
BINID:0010
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0064
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
VBS82454d9f0d4b22bc8357285e8397ee3a.decoded.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
7 / 7
Path
pe:exe>scr:vbe>pe:exe>pe:rsrc>bin
Shape
pe:exe>scr:vbe>pe:exe>pe:rsrc>bin
malicious
5 nodes
Path
pe:exe>scr:vbe>pe:exe>bin
Shape
pe:exe>scr:vbe>pe:exe>bin
malicious
4 nodes
| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_2cc51d3d.bin (849577 bytes) |
| Info | PDB Path: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb |
4 malicious · 34 files
EXE82454d9f0d4b22bc8357285e8397ee3aT1059.005
Structure
VBSOverlay_2cc51d3d.bin
BATPuu88KnJrp3KQLLKLa874En.bat
EXEPortwinruntime.exe
Structure
BINResources
BIN.Net Resources
VBSysrZEeZ4bXfrtxTRBXu1TlgUg1ug.vbe
BINResources
VBS82454d9f0d4b22bc8357285e8397ee3a.decoded.vbsT1059.005
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account