Suspicious
Suspect

4448ff3acf0bb078c5233b6cc0f977ca

PE Executable
MD5: 4448ff3acf0bb078c5233b6cc0f977ca
Size: 3.83 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 4448ff3acf0bb078c5233b6cc0f977ca
Sha1 8d778fb4d32b91d39000e1581a868ecd9cd13194
Sha256 6f295f2aa87bdc8c3d44d7c71d642bfa3bf647293e0f72295b2a09100ad686df
Sha384 fca3bde8d391ec8ffd9673e5fcdf4ca4f35d2adfe65d1d79632f95a452ed37f6b935156a53b95e7a4738c461ffc2b37d
Sha512 19faffbf6e7069f7a4d99c4887702f136913987d0acadbc8b93fc800e47db90b527cbbc88fe7bb5e2d70a4e3a30266144e43c4cf189e3a680055c672888c9e27
SSDeep 98304:oJjGK5fX1dtTlLBeQ9tYAktWjy4/BN5t4qpC:oJjGkfzVztYAktHezt4KC
TLSH 2F0612527B869971C01ADF70C465E3BD7324FF458A518B2736C87E0F7E9A292ED26380
PeID
Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12Private EXE Protector V2.30-V2.3X -> SetiSoft TeamUPolyX 0.3 -> delikon
[Authenticode]_4d944aed.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.8_a
.Zbq
.&K*
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0-preview.png
ID:0003
ID:0
ID:0-preview.png
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0-preview.png
ID:0006
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x3A2800 size 15080 bytes
[Authenticode]_4d944aed.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.8_a
.Zbq
.&K*
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0-preview.png
ID:0003
ID:0
ID:0-preview.png
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0-preview.png
ID:0006
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙