Suspicious
Suspect

bfbd253f8ec4fb4c4d8361f8708fceb2

PE Executable
|
MD5: bfbd253f8ec4fb4c4d8361f8708fceb2
|
Size: 1.11 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
bfbd253f8ec4fb4c4d8361f8708fceb2
Sha1
ada10e50b08a539bfdbfc031c2732ab4463002e0
Sha256
52c8f8a24b3316b92cb36c3eb9c0cc4467a000176c5208b5611ed092f05289d4
Sha384
bc19e025d5c731537cbd49fbd37f08ce67fd870edf934b92c0e46612cf0f9a17367565dd005cbe6eae479c9a6f9f74b7
Sha512
bb7335f9d3632071121a09bb365bb7ceda88dcb660d029b3e1244ac25afa95b25faa3c42f42ec646ff448e11d33010d4fbbae6f67c3a2589cf1fe122ac65d613
SSDeep
24576:BN9r5akBR+JQxWNzEuh2gwg4Tc+Y7pS46gz45lx+creewW927:J0QOQxWNzE+2gw6+gElxzV
TLSH
7135124273E45096F8F2437188F286529272BCB8567663EF21A1B27E8E733C1AD35717

PeID

Microsoft Visual C++ 8.0 (DLL)
File Structure
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
AVI
ID:0BB9
ID:1033
RT_ICON
ID:0001
ID:1033
RT_DIALOG
ID:0082
ID:1033
ID:00B0
ID:1033
ID:00D2
ID:1033
ID:00DC
ID:1033
ID:00E6
ID:1033
ID:0142
ID:1033
ID:0172
ID:1033
ID:0181
ID:1033
ID:0184
ID:1033
ID:0190
ID:1033
ID:01AD
ID:1033
ID:01C4
ID:1033
ID:01D7
ID:1033
ID:01E7
ID:1033
ID:0216
ID:1033
ID:0232
ID:1033
ID:0237
ID:1033
ID:026C
ID:1033
ID:027F
ID:1033
ID:028D
ID:1033
ID:02AC
ID:1033
ID:02D2
ID:1033
ID:02ED
ID:1033
ID:0330
ID:1033
ID:0367
ID:1033
ID:07D1
ID:1033
ID:07D2
ID:1033
ID:07D3
ID:1033
ID:07D4
ID:1033
ID:07D5
ID:1033
ID:07D6
ID:1033
RT_STRING
ID:003F
ID:1033
ID:004C
ID:1033
ID:004D
ID:1033
ID:0050
ID:1033
ID:0053
ID:1033
ID:0055
ID:1033
RT_RCDATA
ID:0000
ID:1033
Exists.dotx
Antique.dotx
Combinations
RT_GROUP_CURSOR4
ID:0BB8
ID:1033
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:1033
Exists.dotx
Antique.dotx
Combinations
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: wextract.pdb

bfbd253f8ec4fb4c4d8361f8708fceb2 (1.11 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙