Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5: bb027d84538b33927de300eb7e524095
Size: 12.98 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 bb027d84538b33927de300eb7e524095
Sha1 87eab6ff4f4531d18516f416d8a94987fadbec11
Sha256 67ef7c95ecddd6f385897cd6c12e0017a1ea8e538009607251d5de8b7839a07d
Sha384 c509cbf12bf5a1a7376cd03c3cfd82c6e21e974494d7906c01b79f57dc324780c5ff5f78ad2eb7f74f2b9bf9c3da6343
Sha512 19c1322060c689660cdc80b41a93b76b9abaf4097df4b2d5dfb1cd063115e51e9ead45560eba0a4e3aa715c69ae18deed271becea24bbafa3e2af2d4a865dd45
SSDeep 196608:6H5z5qeFmhUA/lir/heFBvg5WprNN38tcT1cPwT2Q6Xew89mLQ+f/sQ9/gRjpsl3:6Ht56B/qFWhNN3kW1pT2/XZLLJw1I3
TLSH 3BD62307E7B356F8C66FD03846964776BA30B89A42307E6E5A54C7321F20E605F6EB34
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12
bb027d84538b33927de300eb7e524095
[Authenticode]_c4de80e3.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.tls
.reloc
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0xC60400 size 1464 bytes
URLs in VB Code - #1 URIsuspect
https:huhuhuhuhuhuhu
URLs in VB Code - #2 URIsuspect
https:huhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙