Suspicious
Suspect

06d5333f7d48aede561155bc021ebadd

PE Executable
MD5: 06d5333f7d48aede561155bc021ebadd
Size: 12.58 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 06d5333f7d48aede561155bc021ebadd
Sha1 b64bc5e7c9b85a2415866a9ad058dbeef93df01d
Sha256 d39be9b1c8bdca49b3d814849ae507df280c6fe967e5c08fadfdc81d6f2f1cbc
Sha384 d7290be50b0febe8acaec53c3a56c75fe3c55101728154e44e9c8c371d4db6b55e2f9de79ab32851820c98f560712f63
Sha512 7a013196c12befea39c0f75f130f1540c390b64671ee550990e6737c4886d75389593f8631648a63f4cee195490d293613f8d6b04d4667c1682b8ef1373878bd
SSDeep 6144:Y0D2u8nLpFNNvvDqz3blJYZYE1jm1euRQzJpGKAx0:uu+K30ZYAmvKF
TLSH 10C69D19FBA914F9E177C17CC9530905EA72BC460761ABCF23A05AA61F236E09E3F711
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Overlay_b5bb9ded.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_b5bb9ded.bin (12231680 bytes)
Info
PDB Path: C:\Users\danar\source\repos\sigjaw\x64\Release\sigjaw.pdb
Overlay_b5bb9ded.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙