Malicious
PE Executable
MD5: cb1c439f8ee8b231698c684d2fd0839d
Size: 1.17 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Encoded VBScript file
Size
1.17 MB · 1,172,170 B
First seen
2025-07-12 10:45 · one year ago
Last seen
2025-07-12 10:45 · one year ago
Last analysis
2025-07-12 10:46 · one year ago
Hashes
MD5
cb1c439f8ee8b231698c684d2fd0839d
Sha1
5a0d69edfc809389a6375ad8779eecfd07836268
Sha256
2f9bb93600a4d99b591c7e084a3ed79693578f61723f00cd489a47af03e8e5e8
Sha384
9f1c87155c8d204b74c2571cfeba00566e575e02247619c19b7853c421fa4885fd7c5371dc66e4c43e4fcd9374079080
Sha512
86b2c18d3767aa6c8fc1d4d92d147690cca01e1060ccf73c5960c73d1f1451a8aca05d0b0d28d6b44d9491b7c8601e07643c0fad81ac7b12e3d47e67ebe3d427
SSDeep
24576:y2G/nvxW3WevqsVodGklMh2PJveo+dhdV:ybA3QIpRIveo+vr
TLSH
87454A117E548D11F0181233E2EF45184BF4AC206AA6E76BBEBA376D15263D37C1DACB
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
3 malicious · 29 files
EXEcb1c439f8ee8b231698c684d2fd0839dT1059.005
Structure
BINResources
BINPNG
BINID:0065
IMGID:1033
IMGID:1033-preview.png
BINID:0066
IMGID:1033
IMGID:1033-preview.png
BINRT_ICON
BINID:0001
IMGID:1024
IMGID:1024-preview.png
BINID:0002
BINID:1024
BINID:0003
BINID:1024
BINID:0004
BINID:1024
BINID:0005
BINID:1024
BINID:0006
BINID:1024
BINID:0007
BINID:1024
BINID:0008
BINID:1024
BINRT_DIALOG
BINID:0000
BINID:1033
BINRT_STRING
BINID:0007
BINID:1033
BINID:0008
BINID:1033
BINID:0009
BINID:1033
BINID:000A
BINID:1033
BINID:000B
BINID:1033
BINID:000C
BINID:1033
BINID:000D
BINID:1033
BINID:000E
BINID:1033
BINID:000F
BINID:1033
BINID:0010
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0064
BINID:1024
BINRT_MANIFEST
BINID:0001
BINID:1033
VBScb1c439f8ee8b231698c684d2fd0839d.decoded.vbsT1059.005
VBScb1c439f8ee8b231698c684d2fd0839d.decoded.vbs.deobfuscated.vbsT1059.005
PDB Path
PATH
D:\Prohuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 29 files
EXEcb1c439f8ee8b231698c684d2fd0839dT1059.005
Structure
BINResources
VBScb1c439f8ee8b231698c684d2fd0839d.decoded.vbsT1059.005
VBScb1c439f8ee8b231698c684d2fd0839d.decoded.vbs.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
PDB Path
PATH
D:\Prohuhuhuhuhuhuhuhuhuhuhu
cb1c439f8ee8b231698c684d2fd0839d
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account