Suspicious
Suspect

PE Executable
MD5: 11b2a6b82acbe4b73ea68615f6d737b6
Size: 2.24 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 11b2a6b82acbe4b73ea68615f6d737b6
Sha1 e6c096dddaebe09bad5372e60e0bf05589f4a8c3
Sha256 925a447b319c05bc4ebe88b3a4404a84351e01026ef4de8d65bed475c9859be9
Sha384 494efea615c5e4fd77a50b331c7cd11c120772ca8de344c282821bb370229c90685499e818b3cce6f6981127cfc21836
Sha512 98ae692a77371b8f5f5926621ca2a7f095b2b9795bc59f406e2c51b8ee7513c6ce58e59dd2e1e6192724bef94714d1ef7d5fe27d8c2dad9b780249d4c6376955
SSDeep 49152:0OG0IDlUt60S/8TnhfLVDfQDJixz5WuSNr5A/ZA:0WZ9S627CA
TLSH F1A57B1BBC9C47EAC4D68732886E30627A71BC894F6113D72A55B27C2FF66E08D75B10
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
11b2a6b82acbe4b73ea68615f6d737b6
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
RT_MESSAGETABLE
ID:0001
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
11b2a6b82acbe4b73ea68615f6d737b6
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
RT_MESSAGETABLE
ID:0001
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙