Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5: 1e793c452e11b0f0ccedb67137909bfb
Size: 549.11 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 1e793c452e11b0f0ccedb67137909bfb
Sha1 33c497bcdb6d1b079d0b4dacaa1642d9c2d96aeb
Sha256 3e5b41e258fb843f6305b8381be4377aeaf6beb83b59c7578dfc226d2bd9a55a
Sha384 3ae9d90f775f342172176c1ede44ba553dc366cc554a03f7e8b7f2b21162ea2a73eed403a3b3a3914f21b005f29e8aa4
Sha512 ca4811a26fbe8dc5a19ea9ef34b5ad677737d0427cbb3a074983cfd084c2523fbd077c2221165fb0b090e83deba3fc460a299e56356de8cab31f835a6fed113c
SSDeep 12288:4UBbS5XZQPVmoRovpt01jVfDxueFClgCUniZaQnV2:hVSDQd7qvpt01xfFusCTUnMaQns
TLSH 5AC4122DFB83EC27CE76503056B5D97B95B0E66475773E03AE978AEEDF60E024A09100
PeID
Installer Nullsoft PiMP Stub v.3.0.x - A.S.L Microsoft Visual C++ v6.0 DLL
1e793c452e11b0f0ccedb67137909bfb
[NSIS Installer] @ #00020208
nsDialogs.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_DIALOG
ID:0001
ID:1033
System.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.reloc
Bloddraabes.Len
Bodsvelsernes79.unm
Hemiapraxia.Ops
Fejlplacere.ini
Festligholdendes.bed
Geomorphologist40.jpg
Geomorphologist40.jpg-preview.png
Knurs.txt
Organizatory.txt
Rakery44.ini
Transnational.jpg
Transnational.jpg-preview.png
Underforsyningernes.ini
adressekatalog.jpg
adressekatalog.jpg-preview.png
amotus.sam
corpses.txt
depredatory.jpg
depredatory.jpg-preview.png
formaalsbestemt.jpg
formaalsbestemt.jpg-preview.png
friktionsls.txt
hjertebrns.jpg
hjertebrns.jpg-preview.png
kattejers.ini
nascencies.jpg
nascencies.jpg-preview.png
unflavored.txt
vog.ini
[SETUP_DECOMPILED.NSI]
[Authenticode]_febf776c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
Resources
RT_BITMAP
ID:006E
ID:1033
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
RT_DIALOG
ID:0066
ID:1033
ID:0067
ID:1033
ID:0068
ID:1033
ID:0069
ID:1033
ID:006A
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x84E70 size 4744 bytes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙