Suspicious
Suspect

dd473488562321430ce739af80cda4e9

VBScript
MD5: dd473488562321430ce739af80cda4e9
Size: 5.27 MB
text/vbscript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 dd473488562321430ce739af80cda4e9
Sha1 17cdaeb37dc2ff6d712f1533331eba56c354dc35
Sha256 ec1dc6b1bd1d0cc91e0778f8f6469a5fcbbd788e97243c1739b4e8959ffb5626
Sha384 2e08f3bfe3fa54447a5787de18b067cc0eea0306684eeae38f374bae515762982a9bf9627847dc1c889eecfaa62e0935
Sha512 90ab36e06949c43e23da99dec66f4ebeeed4d843c4f97420c15bdd70ac0267fecabb2c5258d7e244c07c8109736e98e20f14708ff4ded62a92ee3ca1c3e9f46e
SSDeep 98304:OFMEzDe8hin7f0pX7o23SQoOW1s3uBSKp:OiZ02fVp
TLSH 3B364A03E65541D9C4ADC1BA834BD633AA71B88A8B31B1EF1BD44F112E29FD06B3D758
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.vhfgxav
.itfenr
.jmumfr
.rnxl
.rsrc
.reloc
Resources
RT_CURSOR
ID:0001
ID:1033
RT_BITMAP
ID:0064
ID:1033
RT_STRING
ID:0001
ID:1033
ID:0007
ID:1033
ID:000D
ID:1033
RT_RCDATA
ID:012C
ID:1033
RT_GROUP_CURSOR2
ID:00C8
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: C:\build\src\Release\svchost.pdb
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.vhfgxav
.itfenr
.jmumfr
.rnxl
.rsrc
.reloc
Resources
RT_CURSOR
ID:0001
ID:1033
RT_BITMAP
ID:0064
ID:1033
RT_STRING
ID:0001
ID:1033
ID:0007
ID:1033
ID:000D
ID:1033
RT_RCDATA
ID:012C
ID:1033
RT_GROUP_CURSOR2
ID:00C8
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙