Suspicious
Suspect

b4691ff531364fd7ef388299ec6c8b59

PE Executable
|
MD5: b4691ff531364fd7ef388299ec6c8b59
|
Size: 279.59 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
b4691ff531364fd7ef388299ec6c8b59
Sha1
1eee672644375e37ea708a8417d0ab3128826211
Sha256
a3d67ef808497bf48930be418667da0c2d815431213ff9ca4304be6669f26801
Sha384
c50349997bf86781251f35581882beedb26e7f7e519af6167651ae8c8ad3ce99881ab788469be3f0737ed49e8487dce0
Sha512
fffbfe8b85eb7e38a808109ca23f6aa72869ee378efba46c05f6644811bfa6f25744d967279a0e6e510926861435f2dac301002822f0ad4058b9a51422272d80
SSDeep
6144:T7e/FDS+SjYV8PNoM3q0oQxbfOqNenyw0lO+p:fYSRjYV0NzoSOqQyw0l1p
TLSH
8D547B416F38D8A2CA505172C826E6F63DA61D84ABE4DE972BC23F9F77351E1057E00B

PeID

Microsoft Visual C++ v6.0 DLL
File Structure
[NSIS Installer] @ #00021408
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_DIALOG
ID:0065
ID:1033
$(LSTR_2946)
[SETUP_DECOMPILED.NSI]
[NSIS Uninstaller] @ #00043EFB
[SETUP_DECOMPILED.NSI]
Overlay_58fecb69.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_DIALOG
ID:0066
ID:1033
ID:0067
ID:1033
ID:0069
ID:1033
ID:006A
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

Overlay extracted: Overlay_58fecb69.bin (143396 bytes)

b4691ff531364fd7ef388299ec6c8b59 (279.59 KB)
File Structure
[NSIS Installer] @ #00021408
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_DIALOG
ID:0065
ID:1033
$(LSTR_2946)
[SETUP_DECOMPILED.NSI]
[NSIS Uninstaller] @ #00043EFB
[SETUP_DECOMPILED.NSI]
Overlay_58fecb69.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_DIALOG
ID:0066
ID:1033
ID:0067
ID:1033
ID:0069
ID:1033
ID:006A
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙