Malicious
Malicious

f389e77863db01f7b67b49b40421bad8

VBScript Encoded
MD5: f389e77863db01f7b67b49b40421bad8
Size: 4.21 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 f389e77863db01f7b67b49b40421bad8
Sha1 1cc07fd357d404ac60960a1108230b34cce172f2
Sha256 ef02e566039ef3d0c719f5f72f14a8a3e63da53ffa12931cd88b2e8a6a15d934
Sha384 fd1f8cb0f55816b7a5bbe8666595781a056ae666fb83901c71379aa45bfa9cd0ee5f66fb0c48a3534c970c2782fee17d
Sha512 9977e4469a4e9bbc1e01986fd1252dc8425c7234c8dd92b58e582d7df212332f90e49775e5b4f02d77e5bb77123401802eb1c9f730ccc20b52d8c60111c55e5c
SSDeep 98304:yGsYjH4miDK0MOEDcgzo66xRK6KtVdlIZDpKBlp:r1UmMgOQcAoJItVXSDp0
TLSH 5216F112B9A24E77C27017318667023D92E5D7627A22EF4B3A5E1493B9077F18E731B3
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.didat
.rsrc
.reloc
Resources
PNG
ID:0065
ID:1033
ID:1033-preview.png
ID:0066
ID:1033
ID:1033-preview.png
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
RT_DIALOG
ID:0000
ID:1033
RT_STRING
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
ID:000D
ID:1033
ID:000E
ID:1033
ID:000F
ID:1033
ID:0010
ID:1033
RT_GROUP_CURSOR4
ID:0064
ID:1033
RT_MANIFEST
ID:0001
ID:1033
f389e77863db01f7b67b49b40421bad8.decoded.vbs.deobfuscated.vbs
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.didat
.rsrc
.reloc
Resources
PNG
ID:0065
ID:1033
ID:1033-preview.png
ID:0066
ID:1033
ID:1033-preview.png
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
RT_DIALOG
ID:0000
ID:1033
RT_STRING
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
ID:000D
ID:1033
ID:000E
ID:1033
ID:000F
ID:1033
ID:0010
ID:1033
RT_GROUP_CURSOR4
ID:0064
ID:1033
RT_MANIFEST
ID:0001
ID:1033
f389e77863db01f7b67b49b40421bad8.decoded.vbs.deobfuscated.vbs
Malicious
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙