Malicious
PE Executable
MD5: a8a5820911feaef78cbfd9595ffd93bf
Size: 1.85 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Encoded VBScript file
Size
1.85 MB · 1,846,891 B
First seen
2025-09-08 17:32 · one year ago
Last seen
2025-09-08 17:32 · one year ago
Last analysis
2025-09-08 17:36 · one year ago
Hashes
MD5
a8a5820911feaef78cbfd9595ffd93bf
Sha1
ba3a240082528aeea2098cbf8337c19408781a8d
Sha256
b17ece4bdd3b0a43ce8dba70956ff4284e8a0b88bfc205ea86a36bbe3ac41705
Sha384
2e6d726d1e3e8c85f3f91d2ac647df48c36d88c039983e0b7dae9eaf9c0fd0ee2114843d86cb7fdecfaeb89cffa30d86
Sha512
4700c782b3b1d71f5a0bae390899c0d0f302ee268647696af087f62250cb5601e64a07e0799a8b84a91e63b251513682203f785848a40d606c00ce0da2661a22
SSDeep
24576:u2G/nvxW3WieCFfQWIbmio2l0DZwxipABK+tpVJmlJj45qhBmk0S9JrzhNU:ubA3jF4WEoyWlAE+vol4mlrdq
TLSH
C285AD01BE84CA21F0191633C2FF451887B4AC116BA6E71B7EBA376E15123977C1DADB
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
4 malicious · 34 files
EXEa8a5820911feaef78cbfd9595ffd93bf
Structure
VBSOverlay_cf505a6f.bin
BATlXFa3ct0swElFajfyv8rjLDmS.bat
EXEbrowserref.exe
Structure
BINResources
BIN.Net Resources
VBSRHLktONuziWkT.vbe
BINResources
VBSa8a5820911feaef78cbfd9595ffd93bf.decoded.vbs
| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_cf505a6f.bin (1530475 bytes) |
| Info | PDB Path: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb |