Suspicious
Suspect

4d4da0ca69d94516bf83f9f8288abbc1

PE Executable
|
MD5: 4d4da0ca69d94516bf83f9f8288abbc1
|
Size: 213.05 KB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
4d4da0ca69d94516bf83f9f8288abbc1
Sha1
87fb294a2ac7fd36711e835b89c3684ac3ad2030
Sha256
55a0bf1edf21be68ad6de8c265884ee20f59aef9ce6a083d33476113e545afad
Sha384
eddfdaf4f9ecd0a06d46a3b355c01a46bfe58273bdc74f2e32a0e3e06221a7980dbb32aa56a5121088ffa302caafa533
Sha512
228a43da6f41dca1c3f252b6a36ceb33815a40566c9aba095a9c7eab3e78c80a63a1caa79f532b4b93f3cbfeedb470138bfab22b999d942ffd1a3ce35adcf8f2
SSDeep
6144:JZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq5a:bquCuygMQjd5vJIBP1Z
TLSH
CF24022B1B2C9932D6550B3B8EE5EB3461BFF5516733D6D30B00DA9DAD232803E26752

PeID

Stealth PE 1.01 -> BGCorp
File Structure
4d4da0ca69d94516bf83f9f8288abbc1
Overlay_d475b73b.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.PwM
.OwvyT
.MTxF
.XWRUxX
.data
.YCYo
.tKhtUt
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
RT_DIALOG
ID:004E
ID:1033
RT_STRING
ID:00A2
ID:1033
ID:00CA
ID:1033
ID:00F3
ID:1033
ID:010B
ID:1033
ID:0146
ID:1033
ID:01F5
ID:1033
ID:02E5
ID:1033
ID:02F4
ID:1033
RT_RCDATA
ID:00A0
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

Overlay extracted: Overlay_d475b73b.bin (62 bytes)
4d4da0ca69d94516bf83f9f8288abbc1 (213.05 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙