Deep Malware Analysis of aefb098408e904dfdbd501aa9b76f0de | md5: aefb098408e904dfdbd501aa9b76f0de | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | PDB Path | SVG

PE Executable

MD5: aefb098408e904dfdbd501aa9b76f0de

Size: 1.82 MB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	aefb098408e904dfdbd501aa9b76f0de
Sha1	adc5bb5df2ac8466ae4f584fb5a94615a5c7bff7
Sha256	774a65ce32ed90abb4066068a2ef92f6effed6f91cb6de5eae546bee50b8fa7e
Sha384	14d46e284b3bd1bddd96a6404e8045730618d8ed86a2e68ba9369bb67cedce1767b01774ad195e42782f81d15fb42ff5
Sha512	3681eff8dd3b7e6dd8e4e9ca24333d647210ae3ba1f424bf4e0f7f2802bfa2bd9f558e08f09aa3e68aa36a16331aa5fd7c39d107732f12e88acce061fc871f9a
SSDeep	24576:zEW4Hbx4QIxSsAQXeBWOE7if/GMnwL9gD50kY7AT8G2DaKGPbu2WWFfoLElkJUrz:zyR/GswL9gD50kY7Ar2TCbNX9GJpg
TLSH	78858D5566B880F4D47AD238C961850BE6B2B8915730D7CF229E162BAF337D14D3EF22

PeID

MASM/TASM - sig4 (h)Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x1BA400 size 11360 bytes
Info	`PDB Path: C:\Users\docker\Documents\workspace\build-v2\common\hr_sysdiag-app-60\bin\x64\uninst_build.pdb`

URLs in VB Code - #1 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #2 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #3 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #4 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #5 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #6 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #7 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #8 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #9 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #10 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #11 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #12 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #13 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #14 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #15 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #16 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #17 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #18 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #19 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #20 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #21 URIsuspect

https:huhuhuhuhuhuhu

URLs in VB Code - #22 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #23 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #24 URIsuspect

http:/huhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

No malware configuration was found at this point.

URLs in VB Code - #1 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu