Suspect
PE Executable
MD5:
Size: 0 B
application/x-dosexec
The file 99623b60fd0a3f7d0d352d7925f7bd20 is a PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 64 embedded or derived files. It matches 3 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- —
- MD5
- -
- Verdict
- Inconclusive
- File type
- PE Executable
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12tElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
65 files
EXE99623b60fd0a3f7d0d352d7925f7bd20
Structure
P7B[Authenticode]_0a9916e9.p7b
BINResources
| Name | Value |
|---|---|
| Info | Authenticode present at 0x2D4400 size 10888 bytes |
URLs in VB Code - #1
URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #4
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #5
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #6
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #7
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #8
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #9
URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #10
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #11
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #12
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #13
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #14
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #15
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #16
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #17
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #18
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #19
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #20
URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #21
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #22
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #23
URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #24
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #25
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #26
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #27
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #28
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #29
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #30
URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #31
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #32
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #33
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #34
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #35
URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #36
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #37
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential