Suspicious
Suspect

a45ef97d811052c264fd4dd7acd5e79e

VB5/6 Executable
MD5: a45ef97d811052c264fd4dd7acd5e79e
Size: 471.04 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 a45ef97d811052c264fd4dd7acd5e79e
Sha1 0b1497e39cba8c0ca8fe4232d7b0cb6b8683f820
Sha256 1184d9505dd506ce7d0afd5c748c81e92a84d45445f2f86e4c545727f1bc5ca3
Sha384 617abcfa94f60f20882ec18e8c661607b43df77fa182ff648e3d85d6ffa897016d592bbd3692c77a17798010766a61ff
Sha512 e82c946217ffd4bfa888185ba01c0a5522634bca49a7457492cb9ab1ae67714dbadd1ad7e7ad66999c61a51b51477d5ecd07fd2c26e03efb8245fd26ab49c2b6
SSDeep 6144:jblu8d1/w5KA81IJ8GpF6nuTmOOUiBUrjxNBnegi84L7qhecdF9YOyqVzdGcfCW1:HfjYKkJj6GmZUiqrtbH4en6OyqVpu
TLSH 84A43A03AA60A12DF1A3C9F1A8B5A29628267D3917DCE89BF3405F5935315D3ACF131F
PeID
Free Pascal v0.99.10MASM/TASM - sig4 (h)Microsoft Visual Basic v5.0Microsoft Visual Basic v5.0Microsoft Visual Basic v5.0 - v6.0Protect Shareware V1.1 -> eCompserv CMS
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rsrc
Resources
RT_ICON
ID:7531
ID:0
ID:7532
ID:0
ID:7533
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
VB6 Structure
VB Header
VB VBAProject Info
VB Object Table
VB VBAProject Info 2
VB Register Info
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rsrc
Resources
RT_ICON
ID:7531
ID:0
ID:7532
ID:0
ID:7533
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
VB6 Structure
VB Header
VB VBAProject Info
VB Object Table
VB VBAProject Info 2
VB Register Info
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙