Suspicious
Suspect

214c81b63b1b755fa0b7d90a46324105

PE Executable
MD5: 214c81b63b1b755fa0b7d90a46324105
Size: 17.74 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 214c81b63b1b755fa0b7d90a46324105
Sha1 640c5a50418b4001c31cf9ac3d9341908ab40a88
Sha256 4b4069a535570ced343238df30c9a9086a2f8756b61ecb3b9acc1fabd32add39
Sha384 8ceca865ff04664728504a90d28c7f697558b7589c042d254ca3967ee02ae5e935273691fa9795fb3375b7d0864f17b4
Sha512 5b81eeed95bdcdde2f56793629b88c3159336ff5bc4eab226e37692a00f5933b5be13c1200d76c2aa447ad7ef52d0e1eb2c4d5756a32288d24c287d6fb8ffaf0
SSDeep 196608:gi2yHNRTgqAmR7wEufO2bawWNZ4uCESfOb13wuBbKQpbqntQGcs3WLAU2YcTGr:ghyPrpRXOO2bkn4wSfk+ul7i5cs2idTK
TLSH B007121BECA118EAC0AEA33189B256927B75BC481B3223E72F50B6783F767C45D75704
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikontElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
[Authenticode]_1ffb2cc7.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
4
19
32
46
65
78
95
112
Resources
RT_ICON
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
ID:0007
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
ID:7F00
ID:1033
RT_VERSION
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x10E9A00 size 7664 bytes
[Authenticode]_1ffb2cc7.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
4
19
32
46
65
78
95
112
Resources
RT_ICON
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
ID:0007
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
ID:7F00
ID:1033
RT_VERSION
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙