Suspicious
Suspect

4a88c4a8fd4ae358387fe70e97e93a1a

PE Executable
MD5: 4a88c4a8fd4ae358387fe70e97e93a1a
Size: 114.69 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 4a88c4a8fd4ae358387fe70e97e93a1a
Sha1 e132e1b5667f14a545166dbbf91a3a53c9afcd0c
Sha256 d68bd997fea85e2b9e2438e989397798ad214635dd4e43b733214876ac6fa19f
Sha384 4daec78257088aa8d748c513fcd585b3d83cf6caac2dfef2b15c5ea422b54e71bb4a8c1ffe47df248f7b9065b1f3ee5f
Sha512 733554dccd59585fd0d021fb94479bd9dcb4f6dce4feccc53a35f81f98a54d1d1fc0db27725f3a5129740883c8af080ca81daa8010f2b2eba2a470cba4ee5d2e
SSDeep 1536:vqEA70HzLJksPEOajozLElnqiO2odJ/tHi:vXTLJkQ7zAV3ytC
TLSH 09B3E542A3E02412E1AF3B74597513364A7D3C795F2582EFF2D5C58E1879AE0AEB070B
PeID
MASM/TASM - sig4 (h)Microsoft Visual C++Microsoft Visual C++ 5.0Microsoft Visual C++ v6.0Microsoft Visual C++ v6.0
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.idata
.rsrc
.reloc
Resources
RT_BITMAP
ID:0004
ID:1036
ID:0080
ID:1036
RT_ICON
ID:0001
ID:4108
ID:0002
ID:4108
RT_MENU
ID:0004
ID:1036
ID:0005
ID:1036
ID:0080
ID:1036
ID:0081
ID:1036
RT_DIALOG
ID:0064
ID:1036
RT_STRING
ID:0007
ID:1036
ID:0009
ID:1036
ID:0E01
ID:1036
ID:0E11
ID:1036
ID:0E12
ID:1036
ID:0E13
ID:1036
ID:0E14
ID:1036
ID:0E15
ID:1036
ID:0E16
ID:1036
ID:0E71
ID:1036
ID:0E81
ID:1036
ID:0EF1
ID:1036
ID:0EF2
ID:1036
ID:0F01
ID:1036
RT_ACCELERATOR
ID:0004
ID:1036
ID:0005
ID:1036
ID:0080
ID:1036
RT_GROUP_CURSOR4
ID:0081
ID:4108
RT_VERSION
ID:0001
ID:1036
RT_TOOLBAR
ID:0004
ID:1036
ID:0080
ID:1036
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.idata
.rsrc
.reloc
Resources
RT_BITMAP
ID:0004
ID:1036
ID:0080
ID:1036
RT_ICON
ID:0001
ID:4108
ID:0002
ID:4108
RT_MENU
ID:0004
ID:1036
ID:0005
ID:1036
ID:0080
ID:1036
ID:0081
ID:1036
RT_DIALOG
ID:0064
ID:1036
RT_STRING
ID:0007
ID:1036
ID:0009
ID:1036
ID:0E01
ID:1036
ID:0E11
ID:1036
ID:0E12
ID:1036
ID:0E13
ID:1036
ID:0E14
ID:1036
ID:0E15
ID:1036
ID:0E16
ID:1036
ID:0E71
ID:1036
ID:0E81
ID:1036
ID:0EF1
ID:1036
ID:0EF2
ID:1036
ID:0F01
ID:1036
RT_ACCELERATOR
ID:0004
ID:1036
ID:0005
ID:1036
ID:0080
ID:1036
RT_GROUP_CURSOR4
ID:0081
ID:4108
RT_VERSION
ID:0001
ID:1036
RT_TOOLBAR
ID:0004
ID:1036
ID:0080
ID:1036
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙