Malicious
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
6 malicious · 89 files
EXEd6f6b56efad1571248e173a7d3f2d04b
Structure
RAROverlay_94b41d10.bin
PGPxggnqwis.pgp
BINpxegs.bin
VBSbsoocomt.dll
PS1[PowerShell Command]
PS1[Deobfuscated PS]
BIN[Base64-Block]
VBSrwnb.vbe
EXEgugbqdhimr.docx
ICMbalwrsqkg.icm
BINvgspkjxwg.bin
ICMllhpx.icm
MP2krjuk.mp2
3GPhrvwdmx.3gp
DASskcopew.das
XLvtkbjugr.xl
BMPtnrjkp.bmp
XLqobmooulux.xl
TXTojnv.txt
XLSxvavvnronw.xls
ICMxapr.icm
MP3dcaqj.mp3
MP3eeduhso.mp3
3GPiljhlc.3gp
XLSvldckdog.xls
3GPqvxngv.3gp
MP2oscjkl.mp2
BMPehsietncca.bmp
BINResources
| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_94b41d10.bin (882518 bytes) |
| Info | PDB Path: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb |