Suspicious
Suspect

1bcd7ff858c219c0e10f80944b982dc4

PE Executable
MD5: 1bcd7ff858c219c0e10f80944b982dc4
Size: 2.73 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 1bcd7ff858c219c0e10f80944b982dc4
Sha1 b6087da32950c3bbb3529d45b86019e2695e726f
Sha256 fa10747c83596b444b553166f6d9752e235dc043c8d276d5eb56e47c49a49412
Sha384 1e2901c60bbed4fdf680e5fbf006c47659a93255fd8fb8fb10e0b11926dec19cb9b5c7e15d0ffbb030cac87f5b8c51c5
Sha512 cbd8c1266ba90ce850cefb6246d10eb981aaf8fcc2187d2ae85a3861cd4f81784d0f4e8f383f343bc79e2dbc23917258f76ce216ae63cb5bab7627a7053c5997
SSDeep 49152:9r8DM50KiRb9a3K4Au+WlSOor+B0De35/2TUKzm4imV3Bjne/5yyGAu6MmXYN+6:9rQIB6m4hopr6
TLSH C4C56B0A3AA84165C0B7C1BDCA878787F2B2B4050B35ABCF46A4435E1F73BE5467E761
PeID
MASM/TASM - sig4 (h)Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) Pe123 v2006.4.4-4.12
[Authenticode]_1ed776c9.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x298400 size 6376 bytes
Info
PDB Path: amtlib.pdb
[Authenticode]_1ed776c9.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙