Suspicious
Suspect

f7cfd152c4a25df8d69faceb62341f19

AutoIt Compiled Script
|
MD5: f7cfd152c4a25df8d69faceb62341f19
|
Size: 1.13 MB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
f7cfd152c4a25df8d69faceb62341f19
Sha1
1bc97b25acd69879e5b6c7be1ee72cfbae4c02c5
Sha256
2581c31862dbfc47ac0c1760d12ee91b340349fbcae5a561dfcffed49f8ab3d6
Sha384
0cf3fbbcaca33a9a564a95405058580cb56eb62080f42cd83043c44e13b9863b549e951e92af1b706d14a2f0d0914bbe
Sha512
c1261927b37f34e0819a3c747179bbd3da04b1dcc7e6fe806ab66d47dbd27e67570e3d1ebcd1adbc241893a6a75f3b54e1c71792a43cc2793af37da9c96176f9
SSDeep
24576:IMu8F/3krOd/jwNjTGoYWBAxBubEvtB8l88qB:N1V3rd7wNXGoDBszV+l9qB
TLSH
3335339D5BF2E027F8364B719236F2255FEFAE66719053B70301099BE2114C5CC86AE7

PeID

Microsoft Visual C++ v6.0 DLL
Nullsoft PiMP Stub -> SFX
File Structure
Overlay_cea53b35.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
RT_DIALOG
ID:0069
ID:1033
ID:006A
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

Overlay extracted: Overlay_cea53b35.bin (1064786 bytes)

f7cfd152c4a25df8d69faceb62341f19 (1.13 MB)
File Structure
Overlay_cea53b35.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
RT_DIALOG
ID:0069
ID:1033
ID:006A
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙