Malicious
Malicious

99c52aa06849d9b463c2de2c5e559c1d

PE Executable
|
MD5: 99c52aa06849d9b463c2de2c5e559c1d
|
Size: 169.98 KB
|
application/x-dosexec

Print
Infection Chain
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
99c52aa06849d9b463c2de2c5e559c1d
Sha1
5f0e98d46130e6521646eeff686f032b6111414c
Sha256
3debc9bb9a4691d9a8a3aa4305fbcad64989c782fa29c41669dd9ebb1619cb76
Sha384
6657b16ddb0d2c21e125e7eb37481bb94ebb5b3474ac1fa8844f28c88cbbbfbc498ef206c2bbb3f6d7a2e29ea0f8a5af
Sha512
d2f1b00ad0086b4f2e07eb22b95891df5d475ccb40b78c239ae52d698ba924c130edd6415a23e5d80fbb5ad639737d3dc38ab8abeb273e9589b18d92cd6201c6
SSDeep
3072:xahKyd2n31X5GWp1icKAArDZz4N9GhbkrNEk1wOMMusT:xahOXp0yN90QEZy
TLSH
7DF39E4A63E420A6E4B657B199F302835A31BCB19B7492FF12C5D57E0E336C0A932F17

PeID

Microsoft Visual C++ 8.0 (DLL)
File Structure
99c52aa06849d9b463c2de2c5e559c1d
Malicious
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
AVI
ID:0BB9
ID:1033
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
ID:1033-preview.png
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
ID:000D
ID:1033
RT_DIALOG
ID:07D1
ID:1033
ID:07D2
ID:1033
ID:07D3
ID:1033
ID:07D4
ID:1033
ID:07D5
ID:1033
ID:07D6
ID:1033
RT_STRING
ID:003F
ID:1033
ID:004C
ID:1033
ID:004D
ID:1033
ID:0050
ID:1033
ID:0053
ID:1033
ID:0055
ID:1033
RT_RCDATA
ID:0000
ID:1033
RT_GROUP_CURSOR4
ID:0BB8
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
69722278da711.vbs
Malicious
69722278da711.vbs.deobfuscated.vbs
Malicious
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

PDB Path: wextract.pdb
99c52aa06849d9b463c2de2c5e559c1d (169.98 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙