Suspicious
Suspect

4448ff3acf0bb078c5233b6cc0f977ca

Share on LinkedIn
Print
PE Executable
MD5: 4448ff3acf0bb078c5233b6cc0f977ca
Size: 3.83 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 4448ff3acf0bb078c5233b6cc0f977ca
Sha1 8d778fb4d32b91d39000e1581a868ecd9cd13194
Sha256 6f295f2aa87bdc8c3d44d7c71d642bfa3bf647293e0f72295b2a09100ad686df
Sha384 fca3bde8d391ec8ffd9673e5fcdf4ca4f35d2adfe65d1d79632f95a452ed37f6b935156a53b95e7a4738c461ffc2b37d
Sha512 19faffbf6e7069f7a4d99c4887702f136913987d0acadbc8b93fc800e47db90b527cbbc88fe7bb5e2d70a4e3a30266144e43c4cf189e3a680055c672888c9e27
SSDeep 98304:oJjGK5fX1dtTlLBeQ9tYAktWjy4/BN5t4qpC:oJjGkfzVztYAktHezt4KC
TLSH 2F0612527B869971C01ADF70C465E3BD7324FF458A518B2736C87E0F7E9A292ED26380
PeID
Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12Private EXE Protector V2.30-V2.3X -> SetiSoft TeamUPolyX 0.3 -> delikon
[Authenticode]_4d944aed.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.8_a
.Zbq
.&K*
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0-preview.png
ID:0003
ID:0
ID:0-preview.png
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0-preview.png
ID:0006
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x3A2800 size 15080 bytes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙