Suspicious
Suspect

bc52f954e5a25b408559dea257f49653

AutoIt Compiled Script
|
MD5: bc52f954e5a25b408559dea257f49653
|
Size: 1.19 MB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
bc52f954e5a25b408559dea257f49653
Sha1
ba739b508b8c97ff65c7b3cce76d490783b27ae4
Sha256
66055f98d8b1e513d5312cc62b1644aa478f0611feb9353539e805c4daa7e0b0
Sha384
1b9fbc83da2c1a3b79827b067689b2379923d2a6ed4ffdeff42b1b3395db8830fa999ccfd779df606c781331a2767fba
Sha512
5cb6870d304036c99850c33243dccbcbaf6431dbce617e1932fa9735153066e84f57c69421d970646c264344b482bb73af060675e370389e51a911a5e8aa53f2
SSDeep
24576:s2QNhxmdWG2c0lXzi96f7vuk5A6+eXP+E9mn3F7RkofjV0tIDYhfu:+mEdnDSCdsREMF7mamwYo
TLSH
8D4533476B84C178E46769F57F3A614B25B876613A3CEB2FD3416E48343743AC828F26

PeID

Microsoft Visual C++ v6.0 DLL
Nullsoft PiMP Stub -> SFX
File Structure
bc52f954e5a25b408559dea257f49653
Overlay_926eb0c8.bin
Informations
Name
 Value
Info

PE Detect: PeReader FAIL, AsmResolver Mapped OK
Info

Overlay extracted: Overlay_926eb0c8.bin (1125845 bytes)
Artefacts
Name
 Value
PE Layout

MemoryMapped (process dump suspected)
bc52f954e5a25b408559dea257f49653 (1.19 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙