Malicious PE Executable analysis – bcf6be8fd8cc

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

File

Type

Portable Executable file

Detection

PeID

Armadillo v4.xMicrosoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation

3 malicious · 107 files

EXEbcf6be8fd8cc97c9cbdc5038bba2e659

Structure

RAROverlay_9b788f7f.bin

VBSHideRen.vbs

VBSDownC.vbe

DLLHookLib.dll

KEYLicense.key

EXESendSMTP.exe

INISendSMTP.ini

EXEHooker.exe

INIHooker.ini

BATren.bat

BINResources

Name	Value
Info	Overlay extracted: Overlay_9b788f7f.bin (651182 bytes)
Info	PDB Path: d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb

URLs in VB Code - #1 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential