Malicious PE Executable analysis – e76340bcb7b8

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

File

Type

Portable Executable file

Detection

PeID

Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation

6 malicious · 97 files

EXEe76340bcb7b82406fb19fd7062336780

Structure

RAROverlay_12888903.bin

KGLuthb.kgl

MP3dkbe.mp3

VBSbeghmd.bmp

PS1[PowerShell Command]

PS1[Deobfuscated PS]

BIN[Base64-Block]

VBSjago.vbe

EXEmlwbnmbe.pdf

PPTkbrjkwnpuh.ppt

XLSufrqsgent.xls

DLLfddtqd.dll

DASijtdeogkl.das

DLLvuackg.dll

ICMxxds.icm

TXTibso.txt

EXEnnfdnswlj.exe

PDFcbmutdfvlw.pdf

BMPtpelrxqsqp.bmp

TXTiffbq.txt

MP2nfpfjfd.mp2

DLLdburlt.dll

BINlnpukhxkt.bin

MP3necanocgew.mp3

BINvonuc.bin

PPTosus.ppt

PPTppsdutuc.ppt

MSCiaisplfr.msc

BINfwtgkjep.bin

BMPoiwknowvmg.bmp

DOCXofhrl.docx

ICMqbnkfwo.icm

PPTwbxihbju.ppt

BMPthtdrv.bmp

BINResources

Name	Value
Info	Overlay extracted: Overlay_12888903.bin (895874 bytes)
Info	PDB Path: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb