Suspicious
Suspect

15aa3d9c66ee698c24dc593a2067b4eb

PE Executable
|
MD5: 15aa3d9c66ee698c24dc593a2067b4eb
|
Size: 213.01 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
15aa3d9c66ee698c24dc593a2067b4eb
Sha1
e89463e30f45424985582c18c8aef655cb3eb412
Sha256
976947c4a8453e4e6c0a4f5f0a909f9ff490ed23acd4978d496657d918069c99
Sha384
553b2210100d8f5ecc637557065777d8a606c64bd5b4755cd1e6db255e37aa5379788d9a7955aa7cf8cb6097751edcf0
Sha512
1ba368e67c1bcec09e145decd5c290fdb0a3d64855dfe706f711ec749751136a822c538d0e39cff33afcf6c1be3800969b95936cf73dd20f4a3461c15b738a2a
SSDeep
6144:hZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq56:TquCuygMQjd5vJIBP1p
TLSH
5C24022B1B2C9932D6550B3B8EE5EB3461BFF5516733D6D30B00DA9DAD232803E26752

PeID

Stealth PE 1.01 -> BGCorp
File Structure
Overlay_05ddde94.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.PwM
.OwvyT
.MTxF
.XWRUxX
.data
.YCYo
.tKhtUt
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
RT_DIALOG
ID:004E
ID:1033
RT_STRING
ID:00A2
ID:1033
ID:00CA
ID:1033
ID:00F3
ID:1033
ID:010B
ID:1033
ID:0146
ID:1033
ID:01F5
ID:1033
ID:02E5
ID:1033
ID:02F4
ID:1033
RT_RCDATA
ID:00A0
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

Overlay extracted: Overlay_05ddde94.bin (18 bytes)

15aa3d9c66ee698c24dc593a2067b4eb (213.01 KB)
File Structure
Overlay_05ddde94.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.PwM
.OwvyT
.MTxF
.XWRUxX
.data
.YCYo
.tKhtUt
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
RT_DIALOG
ID:004E
ID:1033
RT_STRING
ID:00A2
ID:1033
ID:00CA
ID:1033
ID:00F3
ID:1033
ID:010B
ID:1033
ID:0146
ID:1033
ID:01F5
ID:1033
ID:02E5
ID:1033
ID:02F4
ID:1033
RT_RCDATA
ID:00A0
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙