Suspicious
Suspect

b635765aff2f0be35e839b162efc56c5

VBScript
MD5: b635765aff2f0be35e839b162efc56c5
Size: 10.65 MB
text/vbscript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 b635765aff2f0be35e839b162efc56c5
Sha1 e537f42d469e0b1c314d1f51e8d516156a198c7c
Sha256 6c78eeea92cdf40321481613a78ec7eb17391b4fa4195e57b416a48094243ca5
Sha384 13a603ceee2759ab897de779980896c0d21ff2bce221357a38e3b3a8f836f2020390ec6830ead24e309d1d07a91ce95f
Sha512 ee22dcf6384c9408bc4c68d7d15570d45fae2d0f6aed6bd1e0209a169e4e4e1c167d38dfccff345269b14cb4811d426cbfc44d53e1f3f11bce6839eb029695aa
SSDeep 196608:wixm5cnv0KyPBi+1vL2FsnbfaR9bKv1lOYggh:wixm5cnv0KyPBi+l2Fl9bKv1lOYgE
TLSH ABB64A122645C02AE4BD307C5D38AF4BC56DFDD2177054DBA2B036AE0B329D66939BCB
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLL
[Authenticode]_c1c59bc2.p7b
Overlay_cb76ca1a.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.cmr
.oklekp
.sxzad
.vkv
.rqjxlqn
.azzqaf
.rympge
.tdwuqxc
.ctpvhd
.rsrc
Resources
RT_VERSION
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0xA25200 size 7272 bytes
Info
Overlay extracted: Overlay_cb76ca1a.bin (1029 bytes)
[Authenticode]_c1c59bc2.p7b
Overlay_cb76ca1a.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.cmr
.oklekp
.sxzad
.vkv
.rqjxlqn
.azzqaf
.rympge
.tdwuqxc
.ctpvhd
.rsrc
Resources
RT_VERSION
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙