Suspicious
Suspect

4d4b315073944aebf7fef4e7fe617124

PE Executable
MD5: 4d4b315073944aebf7fef4e7fe617124
Size: 27.1 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 4d4b315073944aebf7fef4e7fe617124
Sha1 883a94b305d67ebd2e5d83a62d4bfbcf2d6b561e
Sha256 5268836ca3725fce7296f9f0e1cf5b0f6e996a0023606a09ecfbac6df75cd6a3
Sha384 96cc207598f8d692096b49c70ad71961fe065c2718543307383a9f92a6c5809a0e6358e95fcb40c9fa4f9b7bf9b1a6b7
Sha512 2bcec0033991a641d89c0c4d87bd88725ec6421f3ce76f0c58c9c250d47f3ef35144516e877e218a2f1f15ff4e7a897e12866d1b892aad98ea75790a0cfbd9e6
SSDeep 196608:1dnI1cjuFUKerHVbK7yCvZhD4kaPpqhDnqLEejtAwXecwma3MM3tjh+GO7igIp1K:1aPUP181D4IDPeuYecwma3fZgKn0q4t5
TLSH 2557A051F30B05F6FF434C3645F96B2F7B39E2DC8974C55AE828243ABAA2C1B459C291
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamUPolyX 0.3 -> delikon
[Authenticode]_855b7d29.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.tls
.rsrc
.reloc
Resources
RT_ICON
ID:0000
ID:1033
Overlay_512fa118.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.rsrc
.reloc
4
19
31
45
57
70
81
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

6 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 4img 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x19D7600 size 1720 bytes
[Authenticode]_855b7d29.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.tls
.rsrc
.reloc
Resources
RT_ICON
ID:0000
ID:1033
Overlay_512fa118.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.rsrc
.reloc
4
19
31
45
57
70
81
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙