Suspicious
Suspect

dee86479a0469b23f0aab3da1a26d1db

AutoIt Compiled Script
|
MD5: dee86479a0469b23f0aab3da1a26d1db
|
Size: 1.49 MB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
dee86479a0469b23f0aab3da1a26d1db
Sha1
81ecd0d7195d518d48baf4d50296bbcb6eee0d3a
Sha256
f0f594b7745386bc9d295183742da8a2425b728227a31ec1668a0001f8c0ed65
Sha384
39ca5d831651a84c63f9f78ae528d163b8ab1ae4a23047b773c36c56fd762450905c3e777797cf4c87f6f0efb6f680b5
Sha512
f6b0aab14b8364e4ac1b48950dd53d5d5b3e6324745608df7d59cc2e7ad7c4f00902ef7255faf3fbe9f635428c2802584bf330eb8ad7d2548f0e09f636fffba8
SSDeep
24576:bVDtDPffbSy3NO/T+pIhH3jGLKqnyQ4AuaaKXYa8bBFV+nM6Sfsayg/9cGb6:bvnbSy9OaShHTGWzTa1Xj89caL/9cGG
TLSH
EF6502C2EA5092A1F9B54D70A1665C950B77AF3AE5983F0B1CE4B42326F3183143FD9B

PeID

Microsoft Visual C++ v6.0 DLL
Nullsoft PiMP Stub -> SFX
File Structure
Overlay_70c32fdb.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_DIALOG
ID:0069
ID:1033
ID:006A
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

Overlay extracted: Overlay_70c32fdb.bin (1068800 bytes)

dee86479a0469b23f0aab3da1a26d1db (1.49 MB)
File Structure
Overlay_70c32fdb.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_DIALOG
ID:0069
ID:1033
ID:006A
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙