Malicious
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Encoded VBScript file
Detection
PeID
Borland Delphi 7 - Nstd EP - ASL sign Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
3 malicious · 58 files
EXEf3af39c8bb5054272971c1654c11c8f9
Structure
BINResources
BINRT_ICON
BINRT_RCDATA
BINID:0000
BINID:0
Structure
BINResources
VBSID:0.decoded.vbs
BINRT_GROUP_CURSOR4
VBSf3af39c8bb5054272971c1654c11c8f9.decoded.vbs
URLs in VB Code - #1
URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
PDB Path
PATH
thuhuhuhu
PDB Path
PATH
D:\Prohuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential