Malicious
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
6 malicious · 79 files
EXEe502627a63e029bcfda1afad2d7176cc
Structure
RAROverlay_8ddc0b8e.bin
RBNrcidjeads.rbn
MSCwncnfbwsre.msc
VBSjxougkh.exe
PS1[PowerShell Command]
PS1[Deobfuscated PS]
BIN[Base64-Block]
VBSiidr.vbe
EXEnnlkmmn.mp3
PPTelvvrtuks.ppt
DASgpfwjx.das
BMPxndbto.bmp
ICMwgfnltndsx.icm
DLLxvgk.dll
TXTcgdhktvs.txt
MSCmkjfnkhj.msc
XLtfajdp.xl
MP3adolgg.mp3
JPGbxchlvb.jpg
BINiijhjj.bin
BMPclco.bmp
MSCplrjvq.msc
XLSbodjfq.xls
BMPqrthvj.bmp
BINResources
| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_8ddc0b8e.bin (906285 bytes) |
| Info | PDB Path: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb |