Suspicious
Suspect

02b4e893c198238ebca54b0480834c70

PE Executable
MD5: 02b4e893c198238ebca54b0480834c70
Size: 27.09 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 02b4e893c198238ebca54b0480834c70
Sha1 ffce728c41dc66cb5a091fc5283b5565acb03751
Sha256 b28e77c5130ee1d1663b459589648e75ae4732adf93c0401d0bff41acba59ce8
Sha384 3b5a79a8efd03ba086140b2e81367f942d90f9e17d4e8584dfbfc9f0b45caceade10a4aeb25e23751010879a5e47abad
Sha512 9505104671f69be7c70f2ca466be75a5d47e77fda205be0eee1a7a75f9b89902d0f1ea5369e4219dca734edd19e30a7a09b60feb7dc3c76d52a7f3e89514182d
SSDeep 393216:f5EolnVQzu/Dar3IuvIT1dJKNjIhNJ6HyQZD:Cu/ubIue1dCIjJkzD
TLSH 9457AF51F30B05F6FF435C3645F9AB2F7B39E2DC8974C55AE428242ABAA2C1B45DC290
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft Team
[Authenticode]_aaca8800.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.tls
.rsrc
.reloc
Resources
RT_ICON
ID:0000
ID:1033
Overlay_68e627ad.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.rsrc
.reloc
4
19
31
45
57
70
81
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

6 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 4img 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x19D6200 size 1712 bytes
[Authenticode]_aaca8800.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.tls
.rsrc
.reloc
Resources
RT_ICON
ID:0000
ID:1033
Overlay_68e627ad.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.rsrc
.reloc
4
19
31
45
57
70
81
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙