Malicious
PE Executable
MD5: 2a94aba32949a893bcf2c8bf7c63c165
Size: 12.57 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
12.57 MB · 12,570,960 B
Hashes
MD5
2a94aba32949a893bcf2c8bf7c63c165
Sha1
2a5130fc7e2e0e2f8a1c124994a2deabc1321e18
Sha256
f866b357edfe87a5c735185737680779975c2659b1a26c6cccd81514705d1013
Sha384
9e370ff8fb8e9924da564e19c5ebcb6b01517ab73773f986f82425eb7dd1d49594d6357c33486a3ec6b2276bea4434e9
Sha512
97b6915f3f673611fd9222b2bc5fc87fff0e6ccba542f068a105d4c88264328b46eaa98696c70fe4984409ed2ed9583905c0fcf3b627ef3ece04bdd8bdca0a46
SSDeep
98304:tjhOBNrzuaCerzFi6bszT1JX4pG2IfZE+m:yBkKr5rszpNDy+m
TLSH
CCC65B11FACB54F6F9036831406BB27F23355D058B28CB9BEB183B6AF877691187A705
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXE2a94aba32949a893bcf2c8bf7c63c165T1027 · T1055Go Loader (Factory-v3)
Structure
BINOverlay_31ad7bfe.bin
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Overlay extracted: Overlay_31ad7bfe.bin (336 bytes) |
| Attribution | |
| GoLoader | GoLoader extraction: NotIdentified |