Suspicious
Suspect

408e94dbc73bfe5d755e3562355c7467

PE Executable
MD5: 408e94dbc73bfe5d755e3562355c7467
Size: 3.74 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 408e94dbc73bfe5d755e3562355c7467
Sha1 7a2fc8cc7ce8c95c71746ed4d01b3755156e1758
Sha256 c2f097ae54d4379b3d3c3a14f3171557666f522cda5eed3cc4418bc3e38677ab
Sha384 3009666d2de69a2bf5da3168d226613271c169e37ac15cc3d1c9d7b98803a291e39062c3e9de6a35a534b23d65f3370c
Sha512 33ff7ed20cb60476aeb8242457b39a3f33416979487c63ed291526e8461e99f060adec68366e0926926e7c4d384132a3a5f93bf2ed26e2126e1a3557450647f2
SSDeep 98304:lSEjBbQ5DGHmsiKTYU2yd1xuWk1zjB7673kg0Rx7aU4B:9HmsiKTpLkzOKRx7aU4
TLSH 6006F04326DB1CFADED32B7854DB633AA735FE748B6A4B2B8118C13068135D16D2EB50
PeID
UPolyX 0.3 -> delikon
Overlay_6a3a0784.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.tls
.rsrc
.reloc
4
19
31
45
57
70
81
97
113
Resources
RT_MANIFEST
ID:0001
ID:0
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_6a3a0784.bin (3282054 bytes)
Overlay_6a3a0784.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.tls
.rsrc
.reloc
4
19
31
45
57
70
81
97
113
Resources
RT_MANIFEST
ID:0001
ID:0
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙