Suspicious
Suspect

PE Executable
MD5: 412dd13fb1898f3324c4488a609c4207
Size: 5.15 MB
application/x-dosexec

This sample is a 4.9 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 4 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
56540f8fac337c9935c7684771f89a700859b3c8b6c66dcc7da804ee8488fd85
MD5
412dd13fb1898f3324c4488a609c4207
Verdict
Inconclusive
File type
PE Executable · 4.9 MB

Cite this report: https://app.malva.re/sha256/56540f8fac337c9935c7684771f89a700859b3c8b6c66dcc7da804ee8488fd85

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
5.15 MB · 5,146,256 B
Hashes
MD5 412dd13fb1898f3324c4488a609c4207 Sha1 092cc56806a495df4512c8df1b453760e68c541f Sha256 56540f8fac337c9935c7684771f89a700859b3c8b6c66dcc7da804ee8488fd85 Sha384 2207bb7287883cbc77e3bf62ef4f748620e9a13a623d8627eeef9da82fd8a00a7f798a93e3258e744a1111861d35bd2e Sha512 c3ca922accd234c554d814fb5cf153df3386220dad72b3ca2a8a3ec646522e3e476345b43d05eaab78e667e6fdd3280a903ff2b426bbc1fd6682769558b867fa SSDeep 49152:2gQlSfXEZw/e5+DFQAbszPrXqKcOprBnMAjChgIgi:2xyyilbM6POxBnrt TLSH 30365B13E96180F0C1D6E738C47B6267AB61B8489B3433A32D61AF782F793D06EB5715
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

5 files
EXE412dd13fb1898f3324c4488a609c4207
Structure
P7B[Authenticode]_a8feed3d.p7b
BINResources
BINRT_ICON
BINID:0001
BINID:1033
BINID:0002
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0001
BINID:1033

Name Value
Info
Authenticode present at 0x4E7E00 size 2192 bytes

5 files
EXE412dd13fb1898f3324c4488a609c4207
Structure
P7B[Authenticode]_a8feed3d.p7b
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙