Suspicious
Suspect

48c26649c61c99b349d2915ad9692402

PE Executable
MD5: 48c26649c61c99b349d2915ad9692402
Size: 7.31 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 48c26649c61c99b349d2915ad9692402
Sha1 8e776cd4aa2804c5f05b745b7e6eaabb3dcf5cf4
Sha256 e0f4ca7215cfe5ec12545606916be2f45bc326d8217d3b11d44d79e0eebd9d7c
Sha384 8d1eb49bd68317b12da98938f3fab25b0d32084f0a07090f9e4d396ddd9cf0707daa4bc299b5fddd8888d59f59efd1db
Sha512 fcf4b16dd4b7c010c2fcc22c947fcbd60242c2d2c1e08fb574e411eba5d545fc4e78426aba9dbc477da83bd8c31aa6d9f978a5bd885e4095a40c0f7527a5aed9
SSDeep 98304:jfoTTEcaJHjAW6o6wChEhkRETlnd4L8ptjsFFyNdOoVgoO6S+KxuA8g:jOgcmAW56wC2Sy4EjsFpoVgoOZ+Kgo
TLSH C776011BBCA504F6D06A97328972A6423B71BC450F3163C32DA1B67C2FB32E59CB9754
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
Overlay_135cba6a.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_135cba6a.bin (358509 bytes)
Overlay_135cba6a.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙