Suspect
PE Executable
MD5:
Size: 0 B
application/x-dosexec
The file 88a6fcf253456f7a8404cbd1f5ba6f26 is a PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 251 embedded or derived files. It matches 30 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- —
- MD5
- -
- Verdict
- Inconclusive
- File type
- PE Executable
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLL
243 files
EXE88a6fcf253456f7a8404cbd1f5ba6f26
Structure
P7B[Authenticode]_02659b56.p7b
BINResources
DLLScreenConnect.Client.dll
DLLScreenConnect.ClientService.dll
DLLScreenConnect.Core.dll
DLLScreenConnect.Windows.dll
EXEScreenConnect.WindowsClient.exe
BINScreenConnect.WindowsClient.exe.config
BINServiceExeWithoutService
DLLScreenConnect.InstallerActions.dll
DLLMicrosoft.Deployment.WindowsInstaller.dll
BINCustomAction.config
| Name | Value |
|---|---|
| Info | Authenticode present at 0x2F2000 size 128280 bytes |
| Info | |
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential