Suspicious
Suspect

42aa57b395fc195a34aa25102988885c

Share on LinkedIn
Print
ZIP Archive
MD5: 42aa57b395fc195a34aa25102988885c
Size: 252.53 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 42aa57b395fc195a34aa25102988885c
Sha1 bb8e6cd9718eecc1fd612a62461a4232ac93c176
Sha256 f59e58d21c6e47c178f977679040627375af0ec6198aa4acbcec07510016df21
Sha384 539a07c1189543fd1a131b037d2e9d6238c52346620e78a85030d9ce60b0295af30762ecc5f6a12aff351a0fb325f7ed
Sha512 fd941827c41346e4ae336a600081941d395ec0aacb673d3025839df30d3cfa2df45c8083d174eec300ebc15370e6bab54923fd204fe19c880e9fae61dba6088b
SSDeep 6144:XUurn9Y6eeez7jXWtvRq8xysjbCxnR55tHDU+1fdTlJtmHDK:XF9YJvnWtwdsjbC7tHDFRbJtn
TLSH AC3423C04D876340D0975699BE0270F92B5FBDB4893BBFE53973285B18E417078B6953
42aa57b395fc195a34aa25102988885c
Endermanch@Deskbottom.exe
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
CODE
DATA
BSS
.idata
.tls
.rdata
.reloc
.rsrc
Resources
RT_CURSOR
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
RT_BITMAP
ID:0000
ID:0
RT_ICON
ID:0001
ID:1049
RT_DIALOG
ID:0000
ID:0
RT_STRING
ID:0FF0
ID:0
ID:0FF1
ID:0
ID:0FF2
ID:0
ID:0FF3
ID:0
ID:0FF4
ID:0
ID:0FF5
ID:0
ID:0FF6
ID:0
ID:0FF7
ID:0
ID:0FF8
ID:0
ID:0FF9
ID:0
ID:0FFA
ID:0
ID:0FFB
ID:0
ID:0FFC
ID:0
ID:0FFD
ID:0
ID:0FFE
ID:0
ID:0FFF
ID:0
ID:1000
ID:0
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR2
ID:7FF9
ID:0
ID:7FFA
ID:0
ID:7FFB
ID:0
ID:7FFC
ID:0
ID:7FFD
ID:0
ID:7FFE
ID:0
ID:7FFF
ID:0
RT_GROUP_CURSOR4
ID:0000
ID:1049
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
An error has occurred. This application may no longer respond until reloaded. Reload 🗙