Suspicious
Suspect

9e2503092416436f64cc33e4b4c1460f

VB5/6 Executable
|
MD5: 9e2503092416436f64cc33e4b4c1460f
|
Size: 230.13 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
9e2503092416436f64cc33e4b4c1460f
Sha1
f23a28ebb9468cffd06f679b330dc9f74e9a3c1b
Sha256
a765472abcd19fe146ce83fc1bc82641dfbf7e7a063977728ddb9fa7750d7799
Sha384
26df362589ccbace1f93a726cd3a1b72451749d104f420bf7ac46424de3967ef610082e6f2a9a3d384e20c2ffe376dfb
Sha512
41d5e8eb2f47055d456587f79454b3331ce49458b353c91a9fc6811a7b9315dc3db735c30c6d17994ef6b2a415bcaa6afb5a8543bccfb3677e4c85b5d841b518
SSDeep
3072:9vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6u4PmuK:9vEN2U+T6i5LirrllHy4HUcMQY6E
TLSH
B724092BEE00301ED967C5F0642175AAFA267D621BD19C5B32D1AF0938B4A13B6F530F

PeID

Microsoft Visual Basic v5.0 - v6.0
Protect Shareware V1.1 -> eCompserv CMS
File Structure
Overlay_507d5420.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.cikos
.rsrc
Resources
RT_ICON
ID:7531
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
VB6 Structure
VB Header
VB VBAProject Info
VB Object Table
VB VBAProject Info 2
VB Register Info
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

Overlay extracted: Overlay_507d5420.bin (33012 bytes)

9e2503092416436f64cc33e4b4c1460f (230.13 KB)
File Structure
Overlay_507d5420.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.cikos
.rsrc
Resources
RT_ICON
ID:7531
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
VB6 Structure
VB Header
VB VBAProject Info
VB Object Table
VB VBAProject Info 2
VB Register Info
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙