Suspicious
Suspect

26aa06f7c7609ba04e3ff3ff25ee46ab

PE Executable
MD5: 26aa06f7c7609ba04e3ff3ff25ee46ab
Size: 3.34 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 26aa06f7c7609ba04e3ff3ff25ee46ab
Sha1 ad69c3ce50248510e585c81fb06d4629cc419cb5
Sha256 1e13c2c9eac72daf63fd00a9946878949e159ae6ec51b54ec64f942d79d61913
Sha384 0e15cfa731b2662446d8d972f5d36b91d93d4f07ab07f3b1cef01cfde6aefd239020d2930ead223612a27fb7e787f32e
Sha512 70af2fbf1c067f80e7d97e39f7f16cad8ed4b8a59a90772cbc9923ad3d26d977f8452a4ebbb1944f0a6861e48bf13c2f5c178c54a72f79b5a21bbe7b2d3b2f50
SSDeep 49152:lVEkRHDjUOAvaPKnW5HgAhPsujHI5rUhX+EPg6fClA8YUr:lf1MWDskI5ApPEAu
TLSH BEF57C06BCA549E6C0AEB33289B35192BB35BC181B3527D72E90B7782F727D19C36714
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikontElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
[Authenticode]_4eed1a85.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x32F600 size 2424 bytes
[Authenticode]_4eed1a85.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙