Suspicious
Suspect

449ec1cd1ec70055152c93591a2c0374

Share on LinkedIn
Print
PE Executable
MD5: 449ec1cd1ec70055152c93591a2c0374
Size: 4.37 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 449ec1cd1ec70055152c93591a2c0374
Sha1 9e50d1efb2837ee7b9d004bfebf675f2121d4abb
Sha256 4eb1b940a3fc720978fc4fa778e0739656a98109a096845fc898a4a6a16100c7
Sha384 aecff843806f44e1769b8fba7e5dbfe061c6915e44d06ed8edf252d4319513559a8482069443541cfd7f14330d72c64b
Sha512 fbb3b796ff6d7fb4ef5d3da14947a6c187e2770bee191fa4b2d8edfb0e292657de0af6944ddb89f604256f18002be63ff13d685002f869567228ca86d1fe61ec
SSDeep 49152:B+hNfHWKpIxdeOsOpP+Df9e+adwLmR6dnJ4YfHHlHcS6gnK9pqgMX19hlAzZ:EfH8deOsOQf5mYdHcS7gMX19hlAzZ
TLSH 97163B4369DB0DE9DDD6A7BC61C36336A734FD758A392F2B9604C6312D536C0A92EB00
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Overlay_e91c4f1b.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.CRT
.tls
.rsrc
.reloc
4
15
30
42
56
68
81
92
108
124
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
ID:0007
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0000
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
449ec1cd1ec70055152c93591a2c0374
0x0015D741.svg
0x0015D741.svg-preview.jpg
0x0015D851.svg
0x0015D9C9.svg
0x0015DAD9.svg
0x0015DC11.svg
0x0015DCE9.svg
0x0015DCE9.svg-preview.jpg
0x0015DDB9.svg
0x0015DDB9.svg-preview.jpg
0x0015DEE9.svg
0x0015DEE9.svg-preview.jpg
0x0015DFD9.svg
0x0015DFD9.svg-preview.jpg
0x0015FD23.svg
0x0015FD23.svg-preview.jpg
STICH beta

No STICH Path has been generated for this analysis yet.

4 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_e91c4f1b.bin (1990432 bytes)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙