Suspicious
Suspect

41842f3ea7a063a3e0b2c0191b3fa028

ZIP Archive
MD5: 41842f3ea7a063a3e0b2c0191b3fa028
Size: 1.62 MB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 41842f3ea7a063a3e0b2c0191b3fa028
Sha1 7bef2111d84ffba74c3b2d48dd098dc01b399d20
Sha256 d1921b648c42486709b70b6fa8dab237faef47719940b4bbfae81e446540bc11
Sha384 3184f170643b79ec61932f082c1ce4c217e9dd9f7ed40a2415daac2a8c423d5003d8b7aa5f40bc4049ace69c4fe5dbf0
Sha512 e701865186633ea7c2cc62703bd7747f8699a54e2f445d98588e3d46e7e6b9b307d1a5c6276ab8c4ae39322cb3f7c9f4ffeb60bf94c658437bc3b74c1cb2d410
SSDeep 24576:EefdlZQNA005nkd9omDi+PcuhVnV4gipAFHllfveZsJPklJe/DjKNniO0S:hQB05upj0ujBBLJLJR/Dj+F
TLSH 177533FE84F52FAD948A6543437C1EBD992F4CC121912E66C35ADA44EA3E718E3C2D4C
Overlay_7bed4e88.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.itext
.data
.bss
.idata
.didata
.edata
.tls
.rdata
.reloc
.rsrc
Resources
RT_ICON
ID:0064
ID:1033
RT_STRING
ID:0FF5
ID:0
ID:0FF6
ID:0
ID:0FF7
ID:0
ID:0FF8
ID:0
ID:0FF9
ID:0
ID:0FFA
ID:0
ID:0FFB
ID:0
ID:0FFC
ID:0
ID:0FFD
ID:0
ID:0FFE
ID:0
ID:0FFF
ID:0
ID:1000
ID:0
RT_RCDATA
ID:0000
ID:0
ID:2B67
ID:1033
RT_GROUP_CURSOR4
ID:0000
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2
Overlay_7bed4e88.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.itext
.data
.bss
.idata
.didata
.edata
.tls
.rdata
.reloc
.rsrc
Resources
RT_ICON
ID:0064
ID:1033
RT_STRING
ID:0FF5
ID:0
ID:0FF6
ID:0
ID:0FF7
ID:0
ID:0FF8
ID:0
ID:0FF9
ID:0
ID:0FFA
ID:0
ID:0FFB
ID:0
ID:0FFC
ID:0
ID:0FFD
ID:0
ID:0FFE
ID:0
ID:0FFF
ID:0
ID:1000
ID:0
RT_RCDATA
ID:0000
ID:0
ID:2B67
ID:1033
RT_GROUP_CURSOR4
ID:0000
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙