Suspicious
Suspect

1fcc0abb1e2f9ec9572952f04ebbf88d

Share on LinkedIn
Print
MD5: 1fcc0abb1e2f9ec9572952f04ebbf88d
Size: 802.57 KB

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 1fcc0abb1e2f9ec9572952f04ebbf88d
Sha1 6683f3d5df2dff7eced3c2feb4d9c3b71a4e2d4c
Sha256 9923c026e550d0231d52308f9dfde33b22d515580fe0e958020aa02ca81c702a
Sha384 f56dd534aee887f960775ce521ce521d821f81f9be3a591c5bd3b92c0930a92f83d1f70050f76e29a825130ec2e204f9
Sha512 cc1fb0ed4a745ab44cbccc82e81a44e6edf65c7a53f26c5ef4cae1b9c1a8108815e17d97f37067a377b8d31572ca51fc3a0a1e428cfcbaded9fb90f2912e837d
SSDeep 12288:z6kHneV/cx1pZRsnypcoe3/e0KTakAhHAlhXZq/MIHutoSREEGutEG4PEwiQh23:P+VW1WLPvKODAlPq/LHieSKiy23
TLSH 3605231DFB0389F5DA6348305187FABF8A7C9D12956E870ADB5612368E76FB1613E300
PeID
ASProtect v1.32Microsoft Visual C++ v6.0 DLL
Overlay_b95c9c84.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rdata
.bss
.idata
.ndata
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
RT_DIALOG
ID:0069
ID:1033
ID:006A
ID:1033
ID:006B
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_MANIFEST
ID:0001
ID:1033
[NSIS Installer] @ #00018008
Overlay_9610b40c.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.CRT
.tls
.rsrc
.reloc
4
19
31
45
57
70
81
97
113
[SETUP_DECOMPILED.NSI]
[NSIS Uninstaller] @ #000C3AE3
[SETUP_DECOMPILED.NSI]
STICH beta

No STICH Path has been generated for this analysis yet.

4 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 3img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_b95c9c84.bin (704270 bytes)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙