Malicious PE Executable analysis – b6b156e89d24

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

File

Type

Portable Executable file

Detection

PeID

Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL

3 malicious · 262 files

EXEb6b156e89d24f5452137b558d7b74353

Structure

P7B[Authenticode]_38e93011.p7b

BINResources

BINTYPELIB

BINRT_ICON

BINRT_MENU

BINRT_DIALOG

BINRT_STRING

BINRT_RCDATA

BINID:0001

BINID:00EE

BINID:00EF

BINID:00F0

BINID:00F1

PS1ID:0

PS1[Deobfuscated PS]

BINID:00F2

BINID:00F3

BINID:00F4

BINID:00F5

BINID:00F6

BINRT_GROUP_CURSOR4

BINRT_VERSION

BINRT_MANIFEST

Name	Value
Info	Authenticode present at 0x176000 size 2584 bytes
Info	PDB Path: t$mn

Deobfuscated PowerShell UNKNWOWNmalicious

[Windohuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.