Suspicious
Suspect

15ff48236acd80370f131c4de94d89dd

PE Executable
MD5: 15ff48236acd80370f131c4de94d89dd
Size: 5.45 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 15ff48236acd80370f131c4de94d89dd
Sha1 ef069f096a7d4aad71c1a1bca1c716cd79212f6d
Sha256 b8644e7bdf468dc7d5f10960cfe4ce4b0dbdf1d0a7ee2cc91bed20b41487aedc
Sha384 d3ee5385e4bc718c33b3b6f5ca6bd59ded8e649aa2591fe1ff4f3258833ae6663bbd7837fe0d5a3e23467b729bcaf815
Sha512 592dfb94b7e301a5c5cc2528122f5fe8dd9cf56133818661a3ac4ba67299f415f7a2caa93546fd2b42713a493668d6b1496edcd0047decf7bf235f9bcfbd3c8b
SSDeep 49152:SUSTBHkUNTR0v5VAzP9ZALtNW9oqcyli7TJVBLk5LEarMj5:SUS9iPHgM
TLSH BB46C64BEBB650D1D4BEC0399652A62AFC713899C338A7DF97815B461B21BE0ED3D340
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12Private EXE Protector V2.30-V2.3X -> SetiSoft Team
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.idata
.tls
.00cfg
.fptable
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: C:\Users\jscha\CLionProjects\untitled\cmake-build-debug-visual-studio\Debug\agent.pdb
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.idata
.tls
.00cfg
.fptable
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙