Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
6 malicious · 32 files
EXEc9300e60e8433d1277e5205b48f46a93LOLBin
Structure
RAROverlay_965f09e2.binLOLBin
BINdata
LNKTrumpCryptoPlan.pdf.lnkLOLBin
SHLNK CommandLine
BIN[Lnk Summary]
Name Value
Info
Overlay extracted: Overlay_965f09e2.bin (1464 bytes)
Info
PDB Path: D:\Projects\WinRAR\SFX\build\sfxrar64\Release\sfxrar.pdb
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙