Suspicious
Suspect

96ff8d96555e1c8bcd137ba5d3c8123f

AutoIt Compiled Script
|
MD5: 96ff8d96555e1c8bcd137ba5d3c8123f
|
Size: 1.11 MB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
96ff8d96555e1c8bcd137ba5d3c8123f
Sha1
2659ccfd080f4f14fba038fe7127b67acaf28a0d
Sha256
3f74af617a65716135c4da420dac8b518557aa96179870a545aaee94bd878b97
Sha384
66652ec39a0cb3719b3b29c261d345e34165297e8b810a100a1f62660d79fba5a00cf495fb7bc643f3f5b9d645f92514
Sha512
ade15c2f25d8a1339fdbc686cc2df0bb95f443507dfabab3877f2d070c562a4bc1f8c9ccc128f9b73c7f75833efed3f2e3db3349ba78cb511f640cb68b746612
SSDeep
24576:y5wNR0uetczBPm0bV61DhQr45gAFx7CEzUxC/AAOC6y4l2Ka:pnqtQJh5r45gp9xCfOT3K
TLSH
A63523462FA4C167FA5A0AB13A35C6076AB33C22057DDB1F178C2EDDF8B66604979307

PeID

Microsoft Visual C++ v6.0 DLL
Nullsoft PiMP Stub -> SFX
File Structure
96ff8d96555e1c8bcd137ba5d3c8123f
Overlay_8ee69f7a.bin
Informations
Name
 Value
Info

PE Detect: PeReader FAIL, AsmResolver Mapped OK
Info

Overlay extracted: Overlay_8ee69f7a.bin (1046336 bytes)
Artefacts
Name
 Value
PE Layout

MemoryMapped (process dump suspected)
96ff8d96555e1c8bcd137ba5d3c8123f (1.11 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙