Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
PeID
Microsoft Visual C++ v6.0 DLLPacker=UPX Compresor..Gratuito... www.upx.sourceforge.netUPX -> www.upx.sourceforge.netUPX 2.90 (LZMA)UPX v0.80 - v0.84UPX v2.0 -> Markus, Laszlo & ReiserUPX v3.0
d197c687159d564efb78db9c4fb4d29b
7z-stream @ 0x000182FA.7z
setup.hta
Overlay_4ab92dc9.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
.rsrc
Resources
RT_BITMAP
ID:0000
ID:0
RT_ICON
ID:0032
ID:0
ID:0033
ID:0
ID:0034
ID:0
ID:0035
ID:0
ID:0036
ID:0
ID:0037
ID:0
ID:0038
ID:0
ID:0039
ID:0
ID:003A
ID:0
ID:003B
ID:0
ID:003C
ID:0
ID:003D
ID:0
RT_GROUP_CURSOR4
ID:0065
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_4ab92dc9.bin (3341280 bytes)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙