Suspicious
Suspect

4c8cdacf7e5ec0657c281ec2b107af86

PE Executable
MD5: 4c8cdacf7e5ec0657c281ec2b107af86
Size: 3.4 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 4c8cdacf7e5ec0657c281ec2b107af86
Sha1 646934b76c30d2ac8e5a48f7e1c4f9b13aa52678
Sha256 f8a09b989de6f5f57a4a1666f1b0fb4d1b1175e624d35f9e3dd7805dc06ea52f
Sha384 2c5eff1c3d2493047a8d6a24b5ebccfbdcf965e5466ad8e1150d3e3bdc5e1a66d2af16a4c3da5a57de7add3f38dbefd4
Sha512 da636f0707b9ad15e0c916faf5f0538c427f953f390124682e01ccece2b45646e3d669fb23d04458f6d6ad15db1412da68ad0fba0fdf52bc55b6e3c9f752878b
SSDeep 49152:oBCoY4uf2DFUQs6ypVwF/McQG9iBnObQlkl5r4cfUH:WA4ufzBVS1iBllb
TLSH FDF55B11FDC785F6E503263195A762AF2738A9090F369B97EB503A7DEE732D11C32209
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
[Authenticode]_5cacbd51.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
ID:0007
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x33CA00 size 2392 bytes
[Authenticode]_5cacbd51.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
ID:0007
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙