Suspicious
Suspect

4d56b55b133743418061a05b4c09cb74

Share on LinkedIn
Print
PE Executable
MD5: 4d56b55b133743418061a05b4c09cb74
Size: 3.81 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 4d56b55b133743418061a05b4c09cb74
Sha1 a5833eec48932d697f0cdc1780e4010667513f0d
Sha256 a42df8053e42a3f98ce47aa8a0d130c0aa939d3dd9a8585011ddd665a8463fe0
Sha384 bc90d652f39115bb18491cc529225de16ad86072b6d466807fc26d59dc9889bd37b3a380b58fd0dc0894acf8da17e6d3
Sha512 6022e062abc698232b77f7c3146c9509a661db68c8e4b089002919db041cd2776f841f43a93807e8123234d4ef2adac621917fecc7c35885827a0ac27965294c
SSDeep 12288:dhREHV6oG9qxwOmSt2VHfg5QPNzUzv3IgNaSWYdU4881GNT0Qkb3NnX+ScsTLTX9:dhCkat2VHaUewNLrvq1jDwbjfFN7Q66
TLSH A3069B24BDBA812DD027FFB83DECF99EE9DB66191506646B001703478626AC0CF4B5BD
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
[Authenticode]_5bbe3adb.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
_RDATA
.fptable
.rsrc
.reloc
Resources
EXPAND
ID:09C3
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:2052
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
ID:0008
ID:0
ID:0009
ID:0
ID:000A
ID:0
ID:000B
ID:0
ID:000C
ID:0
ID:000D
ID:0
ID:000E
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0AFD
ID:0
ID:0AFE
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

4 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 3img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x39F600 size 7528 bytes
Info
PDB Path: t$di
An error has occurred. This application may no longer respond until reloaded. Reload 🗙