Suspicious
Suspect

0b11e8d1afe0fe766c3e67e3379bd7ed

PE Executable
MD5: 0b11e8d1afe0fe766c3e67e3379bd7ed
Size: 2.3 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 0b11e8d1afe0fe766c3e67e3379bd7ed
Sha1 4707928c5aefbc45a2d5bb7c0c2ec2dd9d12b3ad
Sha256 e89c6c8b23135345834621ae2d7ac0b8e29757219d08fcc9f4e47ded0b91c3e2
Sha384 a124bafaafaae506ac63461f4aacba62f3343b7f224c8af0efb2e23294314607713b7a8ce3a233da3f485bc38253205d
Sha512 9dbd7e48614af22d1bc3d1fcb598d369a5a885c6bcc459eb5d7e6b4e7b0d5bd6005e4c1cafb968906be7b2c642bbe8232b7f42c729e7ef843ee63a5133236aea
SSDeep 24576:kjPBOdGfXaId994bBSb28OMw9rkeBgaxJSd1UOL2D0CxJgPfJgXhwULD:Y5OdGfXzdv4b0z2D0fJNi
TLSH 57B539076D5081B6D4AAA73694B752A1BB31BC5CCB3233D32FA1A6743F723D25876B10
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
[Authenticode]_acfd97f4.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x22FE00 size 8216 bytes
[Authenticode]_acfd97f4.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙