Suspicious
Suspect

VB5/6 Executable
MD5: b1f815218dd7002fdba3b4673000b3d0
Size: 1.27 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 b1f815218dd7002fdba3b4673000b3d0
Sha1 2f5c64ae95d49f15d3d80412267ecf3437e2c49e
Sha256 b5d11a0f0d79efee98e99a2f72ac19152bba2505b9f12378e43ec2a3d1347a6c
Sha384 5294d095afb36ac76a8d41686e0fdbe96145534ccd5c50b2bc62c0e1ff514e783c10f91d2e0914c21ee0f703944d6363
Sha512 273739ec04060e5880650b87479e5df6f527a08434a220567db0c73c86267c3b882440b0de049920ce0a7608195e713887a2ec0b07f2137e87f960709c63bc78
SSDeep 3072:U+LFYW8UOxLn0YgguAMDkUO32x5Ti5uxgJ05pjOVdXp:7u0YsnD+CFePp
TLSH AC456EE46F9971B8E332B47EBA43AE4C712E0952C1F7154AEB476FDB02B1351C2219C6
PeID
Microsoft Visual Basic v5.0Microsoft Visual Basic v5.0Microsoft Visual Basic v5.0 - v6.0Private EXE Protector V2.30-V2.3X -> SetiSoft Team
b1f815218dd7002fdba3b4673000b3d0
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
ID:0008
ID:0
ID:0009
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
VB6 Structure
VB Header
VB VBAProject Info
VB Object Table
VB VBAProject Info 2
VB Register Info
b1f815218dd7002fdba3b4673000b3d0
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
ID:0008
ID:0
ID:0009
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
VB6 Structure
VB Header
VB VBAProject Info
VB Object Table
VB VBAProject Info 2
VB Register Info
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙