Malicious
PE Executable
MD5: c2196d395e1c4dd5764216936dc09384
Size: 4.09 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Encoded VBScript file
Size
4.09 MB · 4,090,695 B
First seen
2025-07-31 20:45 · one year ago
Last seen
2025-07-31 20:45 · one year ago
Last analysis
2025-07-31 20:46 · one year ago
Hashes
MD5
c2196d395e1c4dd5764216936dc09384
Sha1
59ad7ca9e5d44fc6c86d8acbebe162ec777f6d1c
Sha256
b08e30edb0abe2ce72facff2c05ce3055499ca0ed8f607d49ad8f8681db9b3d2
Sha384
8ad4c7d6882aa9f9d26227ecbbcacfabbb3dddf6c08e6fe2693cf60f2620483a7aa1d27e55e614512c88d074ba4571d8
Sha512
09bb2d26119c52495105e057ff9abe42512de9ebba8b973be0c50271c6b0a1e4e29871b7fcf3ff38568544d847399d0c8d7affe93f6ec143755b17ce8b50d654
SSDeep
98304:yBVI6WScmLPp6YHwDc9g0XST3dcyXV2ElCn:aVIdaLPUDigL1G
TLSH
0A16F10275D28E33C2621B318597023D93A1D7223A52EF5B366F94C3A8177F29E761B3
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikonVC8 -> Microsoft Corporation
2 malicious · 27 files
EXEc2196d395e1c4dd5764216936dc09384
Structure
BINResources
BINPNG
BINID:0065
IMGID:1033
IMGID:1033-preview.png
BINID:0066
IMGID:1033
IMGID:1033-preview.png
BINRT_ICON
BINID:0001
BINID:1033
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINID:0006
BINID:1033
BINID:0007
IMGID:1033
IMGID:1033-preview.png
BINRT_DIALOG
BINID:0000
BINID:1033
BINRT_STRING
BINID:0007
BINID:1033
BINID:0008
BINID:1033
BINID:0009
BINID:1033
BINID:000A
BINID:1033
BINID:000B
BINID:1033
BINID:000C
BINID:1033
BINID:000D
BINID:1033
BINID:000E
BINID:1033
BINID:000F
BINID:1033
BINID:0010
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0064
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
VBSc2196d395e1c4dd5764216936dc09384.decoded.vbs
PDB Path
PATH
D:\Prohuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 27 files
EXEc2196d395e1c4dd5764216936dc09384
Structure
BINResources
VBSc2196d395e1c4dd5764216936dc09384.decoded.vbs
No malware configuration was found at this point.
PDB Path
PATH
D:\Prohuhuhuhuhuhuhuhuhuhuhu
c2196d395e1c4dd5764216936dc09384
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account