Suspicious
Suspect

0e50a266c72c8139d0b05ba5f7dbde21

ZIP Archive
MD5: 0e50a266c72c8139d0b05ba5f7dbde21
Size: 8.88 MB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 0e50a266c72c8139d0b05ba5f7dbde21
Sha1 00938d65826a9218dd53c609bd52f01927fb5987
Sha256 e8fd1e2b88f7f9e593ed2c70684508f1830ce514a4e1c8f7e069d7eb9b54c81e
Sha384 152c82bbd332eb6a2688ca4a13059a8af1c65e2e980af8a7355f31ad9dd8f1f74f84142c608a14152d9ce8774cffc39f
Sha512 98459b9495e1c208346a08dc4b52757da55ba7405f75fbf45d31c295ea1c112a0d4949445ee17ce4180419b0737b07060e3e29028d452329c07f27c19f7ba459
SSDeep 196608:j1Tu98E1uYVsT3N0KwxZneagE4x0W0W2fUY3gJAigCBF:wMSeHRt2fUY3g3tF
TLSH D79633243E9E928FED7519BE0BE441DACDB6C799C5F688CC92AC8D91281B11B01C37DD
0e50a266c72c8139d0b05ba5f7dbde21
x86
api-ms-win-core-processthreads-l1-1-1.dll
[Authenticode]_43d98961.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-core-profile-l1-1-0.dll
[Authenticode]_6ca78227.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-core-rtlsupport-l1-1-0.dll
[Authenticode]_e2a8925c.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
Resources
RT_VERSION
ID:0001
ID:1033
api-ms-win-core-string-l1-1-0.dll
[Authenticode]_c51c8bac.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-core-synch-l1-1-0.dll
[Authenticode]_9cd9ead8.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-core-synch-l1-2-0.dll
[Authenticode]_4401f3c0.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-core-sysinfo-l1-1-0.dll
[Authenticode]_f6f30feb.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-core-timezone-l1-1-0.dll
[Authenticode]_2b6539aa.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-core-util-l1-1-0.dll
[Authenticode]_849e1860.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-crt-conio-l1-1-0.dll
[Authenticode]_59c3b2e0.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-crt-convert-l1-1-0.dll
[Authenticode]_9162a078.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-crt-environment-l1-1-0.dll
[Authenticode]_a6e64b23.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-crt-filesystem-l1-1-0.dll
[Authenticode]_f08a67ea.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-crt-heap-l1-1-0.dll
[Authenticode]_91fbe78d.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-crt-locale-l1-1-0.dll
[Authenticode]_372005a9.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-crt-math-l1-1-0.dll
[Authenticode]_79edf4d2.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-crt-multibyte-l1-1-0.dll
[Authenticode]_5741d0b2.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-crt-private-l1-1-0.dll
[Authenticode]_3083cfb4.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-crt-process-l1-1-0.dll
[Authenticode]_fbcfda57.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
data.pkg
Main.exe
[Authenticode]_158fc1ef.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
python315.dll
[Authenticode]_98f8dc68.p7b
Overlay_09510986.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.gfids
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140.dll
[Authenticode]_8d21be08.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.idata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
version.dll
[Authenticode]_42e5ee46.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.idata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
updater
manager
ks_tyres.ini
NvStWiz.prx
[Authenticode]_16480133.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
RT_GROUP_CURSOR4
ID:0098
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
x64
tradingnetworkingsockets.dll
[Authenticode]_cb3b0570.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
WEVT_TEMPLATE
ID:0001
ID:4147
trading_api64.dll
[Authenticode]_d967d35e.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
SCID
ID:0000
ID:0
RT_VERSION
ID:0001
ID:0
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

6 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 5img 1
0e50a266c72c8139d0b05ba5f7dbde21
x86
api-ms-win-core-processthreads-l1-1-1.dll
[Authenticode]_43d98961.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-core-profile-l1-1-0.dll
[Authenticode]_6ca78227.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-core-rtlsupport-l1-1-0.dll
[Authenticode]_e2a8925c.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
Resources
RT_VERSION
ID:0001
ID:1033
api-ms-win-core-string-l1-1-0.dll
[Authenticode]_c51c8bac.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-core-synch-l1-1-0.dll
[Authenticode]_9cd9ead8.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-core-synch-l1-2-0.dll
[Authenticode]_4401f3c0.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-core-sysinfo-l1-1-0.dll
[Authenticode]_f6f30feb.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-core-timezone-l1-1-0.dll
[Authenticode]_2b6539aa.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-core-util-l1-1-0.dll
[Authenticode]_849e1860.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-crt-conio-l1-1-0.dll
[Authenticode]_59c3b2e0.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-crt-convert-l1-1-0.dll
[Authenticode]_9162a078.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-crt-environment-l1-1-0.dll
[Authenticode]_a6e64b23.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-crt-filesystem-l1-1-0.dll
[Authenticode]_f08a67ea.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-crt-heap-l1-1-0.dll
[Authenticode]_91fbe78d.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-crt-locale-l1-1-0.dll
[Authenticode]_372005a9.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-crt-math-l1-1-0.dll
[Authenticode]_79edf4d2.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-crt-multibyte-l1-1-0.dll
[Authenticode]_5741d0b2.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-crt-private-l1-1-0.dll
[Authenticode]_3083cfb4.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
api-ms-win-crt-process-l1-1-0.dll
[Authenticode]_fbcfda57.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
data.pkg
Main.exe
[Authenticode]_158fc1ef.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
python315.dll
[Authenticode]_98f8dc68.p7b
Overlay_09510986.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.gfids
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140.dll
[Authenticode]_8d21be08.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.idata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
version.dll
[Authenticode]_42e5ee46.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.idata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
updater
manager
ks_tyres.ini
NvStWiz.prx
[Authenticode]_16480133.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
RT_GROUP_CURSOR4
ID:0098
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
x64
tradingnetworkingsockets.dll
[Authenticode]_cb3b0570.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
WEVT_TEMPLATE
ID:0001
ID:4147
trading_api64.dll
[Authenticode]_d967d35e.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
SCID
ID:0000
ID:0
RT_VERSION
ID:0001
ID:0
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙