Malicious
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Detection
PeID
Microsoft Visual C++Microsoft Visual C++ 5.0Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0Microsoft Visual C++ v6.0Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
4 malicious · 14 files
EXEf52f583c314702bbfe3b7d804469351c
Structure
7Z7z-stream @ 0x000208A1.7z
BINdata.bin
BINdata1.bin
BINdata2.bin
BINdata3.bin
BINdata4.bin
PS1setup.cmd
PS1[Deobfuscated PS]
7ZOverlay_393a05aa.bin
BINResources
| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_393a05aa.bin (2822828 bytes) |
Deobfuscated PowerShell
UNKNWOWNmalicious
@({
huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential