Malicious PE Executable analysis – f95a1b971d88

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

File

Type

Portable Executable file

Detection

PeID

Armadillo v4.xMicrosoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation

3 malicious · 78 files

EXEf95a1b971d884c6fcf0aee7074a22959

Structure

RAROverlay_ba8435d3.bin

EXESendSMTP.exe

VBSHideTest.vbs

DLLMethodInf.dll

EXEnir.exe

TMPR.tmp

TMPT.tmp

BATtest.bat

BINResources

Name	Value
Info	Overlay extracted: Overlay_ba8435d3.bin (590255 bytes)
Info	PDB Path: d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb

URLs in VB Code - #1 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential