Malicious PE Executable analysis – de64dff70c69

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

File

Type

Portable Executable file

Detection

PeID

MASM/TASM - sig4 (h)Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12

1 malicious · 12 files

EXEde64dff70c69375150e2d982b1f0322e

Structure

BINOverlay_ac199de2.bin

BINResources

Name	Value
Info	Overlay extracted: Overlay_ac199de2.bin (6008975 bytes)
Info	`PDB Path: D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb`