Suspicious
Suspect

3421de0f4fe56f3d6a7c86f281f5115e

PE Executable
MD5: 3421de0f4fe56f3d6a7c86f281f5115e
Size: 2.17 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 3421de0f4fe56f3d6a7c86f281f5115e
Sha1 bd93017965afb4ff0ed13768b450aa56e0fc7231
Sha256 fa38f6539af74b5b355c532a3c71c588960d34abd825442fea98c2177375d010
Sha384 e87d257a57edfb1004e81618abd7744ba0a0bce7e744b95b3720adb91e765cf5b72d610f761ec233a6d9263247804e4c
Sha512 f0c3b0cd9f45f49ada8f3f2c811f9463aa7d15fcb9d299afe3b13dfc87ed853ec445121509cb7d3ca8b776036e0b997374cebb01457d5efff9a68941c700557f
SSDeep 24576:LfRbwvSN00WoClYV67JJxAkJ4vFXaNQ5r+NVMuzSBqAnQTXN69txzBele5rK263G:LfNCS20WFuixUFB6QemqAnC8ng
TLSH 7FA56B0B7CD049E9C8AA673188B261927B35BC194F3627D32E90B7783E727E15D36784
PeID
HQR data fileMEW 11 SE 1.2Microsoft Visual C++ v6.0 DLLtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
[Authenticode]_6517a198.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
ID:0007
ID:0
ID:0008
ID:0
ID:0009
ID:0
RT_GROUP_CURSOR4
ID:0000
ID:0
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x20F000 size 2408 bytes
[Authenticode]_6517a198.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
ID:0007
ID:0
ID:0008
ID:0
ID:0009
ID:0
RT_GROUP_CURSOR4
ID:0000
ID:0
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙