Malicious
Malicious

Share on LinkedIn
Print
PE Executable
MD5: bad36282b930e3495eea6b96393c6b00
Size: 1.68 MB
application/x-dosexec
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
bad36282b930e3495eea6b96393c6b00
Sha1
60430d94d2a391363cd0fd15c703851097bdab7a
Sha256
35376d22449862c4516f080ddc54c416a329839effbaab5a92a337e6ac6cdde2
Sha384
eb670fc8e72271c1b5922e5fec70e744babaa43ec63dcda86a8e128e1dab515bcc9f81f178715ed3fdd41ed836359b8a
Sha512
b0ac64aede1407dc4cd3fc721b2c8cb10b6cf132a085222b8c6a8f1d2658acadeeffaa42fdb21b5a959a5456811bd62978e04f962e6d0e7d275f31b7c3b8d9b8
SSDeep
24576:U2G/nvxW3Ww0t7gLKChCYVnQm97Ud0FpCtvXTZI5aClI1BIqQAWMSTLr:UbA30czV1NhU70bI1BIYWMSj
TLSH
AA758C017EC1CA12F0191633C6EF454447B4AC112AB6E72B7EBA376E55223A37D1DACB

PeID

HQR data file
Microsoft Visual C++ 6.0 DLL (Debug)
Microsoft Visual C++ 7.0 - 8.0
Microsoft Visual C++ 8
Microsoft Visual C++ 8
Microsoft Visual C++ v6.0 DLL
VC8 -> Microsoft Corporation
File Structure
bad36282b930e3495eea6b96393c6b00
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.didat
.rsrc
.reloc
Resources
PNG
ID:0065
ID:1033
ID:1033-preview.png
ID:0066
ID:1033
ID:1033-preview.png
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
RT_DIALOG
ID:0000
ID:1033
RT_STRING
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
ID:000D
ID:1033
ID:000E
ID:1033
ID:000F
ID:1033
ID:0010
ID:1033
RT_GROUP_CURSOR4
ID:0064
ID:1033
RT_MANIFEST
ID:0001
ID:1033
bad36282b930e3495eea6b96393c6b00.decoded.vbs
Malicious
Artefacts
Name
 Value
PDB Path
D:\Prohuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys…) are available with Essential.
Unlock with Essential
bad36282b930e3495eea6b96393c6b00 (1.68 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙