Suspicious
Suspect

fed9e6e5f40799640f4597faa98615e1

AutoIt Compiled Script
|
MD5: fed9e6e5f40799640f4597faa98615e1
|
Size: 1.22 MB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
fed9e6e5f40799640f4597faa98615e1
Sha1
4055a4601cb208b2a8f96629a794895362ca7e0a
Sha256
bdbc0b640c52f4806c22dac829a9e5c5a083f243542e4ab2f7cea6bcc4545753
Sha384
b6d422c0d8127cc30229c3d6c4ad42a37b3eff04726b56aefa3c51ec2274476cd7c38d0b219a87f6f71e2e665b757e4b
Sha512
0b29861014e87ba7aa5e138e99217f7b7e048cca7a924d3a6d7abeb9db01cf0f245893449022fc37955703adbf7f35b67edea7903ea71917249d08367b2d5644
SSDeep
24576:5jO8+9Pze/qiXsa8A9U85zmcCdYcaKm1OJ/R8FVOwqXvn9ic9GU5S41wfy:5j8zeCiXkKU8AbZm1Oz8FVOx4CN1w6
TLSH
4A4523533BE5267BD4B647B664E10393D530FD622BAC58BF21A4C0FC8B23AC8A135B55

PeID

Microsoft Visual C++ 8.0 (DLL)
File Structure
fed9e6e5f40799640f4597faa98615e1
[Authenticode]_fa312dcf.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
AVI
ID:0BB9
ID:1033
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
RT_DIALOG
ID:07D1
ID:1033
ID:07D2
ID:1033
ID:07D3
ID:1033
ID:07D4
ID:1033
ID:07D5
ID:1033
ID:07D6
ID:1033
RT_STRING
ID:0050
ID:1033
ID:0053
ID:1033
ID:0055
ID:1033
RT_RCDATA
ID:0000
ID:1033
RT_GROUP_CURSOR4
ID:0BB8
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Coated.docm
Incredible
Improve
Appreciated
Torture
Admin
Moved
Gd
Dress
Customer
Tourism
Contributing
Laser.docm
Waste.docm
Waiver.docm
Homeland.docm
Payments.docm
Incredible
Improve
Appreciated
Torture
Admin
Moved
Gd
Dress
Customer
Tourism
Contributing
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

Authenticode present at 0x128000 size 11880 bytes
Info

PDB Path: wextract.pdb
fed9e6e5f40799640f4597faa98615e1 (1.22 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙