Suspicious
Suspect

PE Executable
MD5: 212c14d1337fb996c80ee611ac078323
Size: 213.05 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 212c14d1337fb996c80ee611ac078323
Sha1 0056a36a6f3938e130c3ad47a429b79fe9e4ce2a
Sha256 341988e78071d47b805ccf5ec2d032da3512ccd7c8c4dec30124511a8c5026e2
Sha384 9dfcd42735a99904c3b0fc6e2b013541c1eb8001c5c5ffaee60ba2f2b585b405b949473363c7fbe6ed92957834a72487
Sha512 37e8a18ccc4e022577d4f83baec03c0f6938aa8fddc8df9f36974e9da7d2b83df7c0a8726fd7cf2fe199b150a9f2afdea3c71bf3eed08b7f89a798f7255638a7
SSDeep 6144:VZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq5a:nquCuygMQjd5vJIBP1Z
TLSH 1A24022B1B2C9932D6550B3B8EE5EB3461BFF5516733D6D30B00DA9DAD232803E26752
PeID
Stealth PE 1.01 -> BGCorp
Overlay_d475b73b.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.PwM
.OwvyT
.MTxF
.XWRUxX
.data
.YCYo
.tKhtUt
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
RT_DIALOG
ID:004E
ID:1033
RT_STRING
ID:00A2
ID:1033
ID:00CA
ID:1033
ID:00F3
ID:1033
ID:010B
ID:1033
ID:0146
ID:1033
ID:01F5
ID:1033
ID:02E5
ID:1033
ID:02F4
ID:1033
RT_RCDATA
ID:00A0
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_d475b73b.bin (62 bytes)
Overlay_d475b73b.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.PwM
.OwvyT
.MTxF
.XWRUxX
.data
.YCYo
.tKhtUt
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
RT_DIALOG
ID:004E
ID:1033
RT_STRING
ID:00A2
ID:1033
ID:00CA
ID:1033
ID:00F3
ID:1033
ID:010B
ID:1033
ID:0146
ID:1033
ID:01F5
ID:1033
ID:02E5
ID:1033
ID:02F4
ID:1033
RT_RCDATA
ID:00A0
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙