Suspicious
Suspect

netutils.dll

PE Executable
MD5: 19659624f5327852b451e55d42f10814
Size: 923.37 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 19659624f5327852b451e55d42f10814
Sha1 fe41e0792240db27a1068884baf31d9f8971a50d
Sha256 e8a4f2026d5aac1b74acbf7033ea0ec626055d3dbf5d645c9f741a75ad17ea37
Sha384 6cdb9ea515af49d11522f75cb490cba2e9aa8ac55f8c01ee66bf297987a369d7e4b125cf9ec2a3d7cf74acce4f9ade64
Sha512 4adf498455d378031d6276a3610a81964554562ec41a668b599f0679201d4b28e3eb73ca9af278b62224d874db17bca45e84a5770a490b64b0209cbb7cf782ef
SSDeep 12288:zLAjMiKK1sILWWldMs9ZFdIW7NQCfaSUPinvmPFzLdJ5tMo2uaTcIoUX6mdJY9S4:zCRTNnaeQCfDJJuUKSJCSXUGQn4/uR
TLSH AC15E01CD62D0D2EDA230EFDD07A48D6D12AA5E32AC7402737F589E786D3398508FE95
Overlay_345beec2.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_345beec2.bin (236 bytes)
Info
PDB Path: netutils.pdb
Overlay_345beec2.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙