Malicious PE Executable analysis – dea571c6df5e

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

File

Type

Portable Executable file

Detection

PeID

Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation

3 malicious · 163 files

EXEdea571c6df5e956700f8869dea305e07

Structure

RAROverlay_db581caf.bin

CABNTR_Cloud_it.msi

EXECISCO_Update.exe

ICOCISCO.ico

VBSHideDwn.vbs

VBSMessaggio.vbs

BATdwn.bat

BINResources

Name	Value
Info	Overlay extracted: Overlay_db581caf.bin (3121141 bytes)
Info	PDB Path: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb

URLs in VB Code - #1 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential