Suspicious
Suspect

445b56bdc255b067039554e1a058bb31

PE Executable
MD5: 445b56bdc255b067039554e1a058bb31
Size: 2.55 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 445b56bdc255b067039554e1a058bb31
Sha1 7c309a43172fd0d0a2d6b983366ad432649f9e5d
Sha256 5eb378956ee84899b8ec8a59d0b9d5e95bef39cfce2acdfe72b032ea4e704227
Sha384 fc6609f40eea531f63a55965ec56d7e22fcf253f1e3d7a39833f360b1d84cc61f16aa38f4ccdb765e0d74b515b2b5c29
Sha512 84f59d348c79e1521c1939b5dc077bf770578d45b524c52a3e8e9ab0e4e9b031abfb3e50de4651f29400797bb48f7dfce7b92b5c8e21fe9fbeea8a5e0de58608
SSDeep 49152:JpfKlgfYUgpoTBN6fhAqcKmrsIfFvP98PY:J8gN6fhRoFn9/
TLSH 41C54907BDA149E9C09E923189B752A67B74BC090F3223DB2E80B7782F76BD05D35B54
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
[Authenticode]_5cd8a7f8.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x26CE00 size 2400 bytes
[Authenticode]_5cd8a7f8.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙