Suspicious
Suspect

52709e9850a742eea194b78fcb9a5528

PE Executable
MD5: 52709e9850a742eea194b78fcb9a5528
Size: 2.8 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 52709e9850a742eea194b78fcb9a5528
Sha1 044b9e2eba3cb9c410aff01e350676b2405c930e
Sha256 b8006c2a5a511648876a967f55bae95ccb5515ff0436e7855ce5d2ecc7dd407f
Sha384 b020bd0cc6ce510dd4e8f41c82ac80e517824b6cbb4c86ce880624cf00816ed490c9ddfaafbec1c1a0c0bc5fe8239ada
Sha512 c9e101536b2ce93facd64c4b16eb64ee6ebcc503130fee24f4a75c7d38eff2394a07a338780e4ff52aaac6f6b3597e36320bccb1d9222a5d813e880a976e02da
SSDeep 49152:DVyrTRf6BQZtqvxcUHJKAyHLUHI9cCO2:D2+xuUHI
TLSH 67D54A17BDA048E5C09AE33289A74556BB75BC0C0B3237E72EA0BA782F727D05D35B54
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
[Authenticode]_5d4f0321.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
ID:0007
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x2A9E00 size 2392 bytes
[Authenticode]_5d4f0321.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
ID:0007
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙