Suspicious
Suspect

a45ef97d811052c264fd4dd7acd5e79e

Share on LinkedIn
Print
VB5/6 Executable
MD5: a45ef97d811052c264fd4dd7acd5e79e
Size: 471.04 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 a45ef97d811052c264fd4dd7acd5e79e
Sha1 0b1497e39cba8c0ca8fe4232d7b0cb6b8683f820
Sha256 1184d9505dd506ce7d0afd5c748c81e92a84d45445f2f86e4c545727f1bc5ca3
Sha384 617abcfa94f60f20882ec18e8c661607b43df77fa182ff648e3d85d6ffa897016d592bbd3692c77a17798010766a61ff
Sha512 e82c946217ffd4bfa888185ba01c0a5522634bca49a7457492cb9ab1ae67714dbadd1ad7e7ad66999c61a51b51477d5ecd07fd2c26e03efb8245fd26ab49c2b6
SSDeep 6144:jblu8d1/w5KA81IJ8GpF6nuTmOOUiBUrjxNBnegi84L7qhecdF9YOyqVzdGcfCW1:HfjYKkJj6GmZUiqrtbH4en6OyqVpu
TLSH 84A43A03AA60A12DF1A3C9F1A8B5A29628267D3917DCE89BF3405F5935315D3ACF131F
PeID
Free Pascal v0.99.10MASM/TASM - sig4 (h)Microsoft Visual Basic v5.0Microsoft Visual Basic v5.0Microsoft Visual Basic v5.0 - v6.0Protect Shareware V1.1 -> eCompserv CMS
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rsrc
Resources
RT_ICON
ID:7531
ID:0
ID:7532
ID:0
ID:7533
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
VB6 Structure
VB Header
VB VBAProject Info
VB Object Table
VB VBAProject Info 2
VB Register Info
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙