Suspicious
Suspect

52709e9850a742eea194b78fcb9a5528

Share on LinkedIn
Print
PE Executable
MD5: 52709e9850a742eea194b78fcb9a5528
Size: 2.8 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 52709e9850a742eea194b78fcb9a5528
Sha1 044b9e2eba3cb9c410aff01e350676b2405c930e
Sha256 b8006c2a5a511648876a967f55bae95ccb5515ff0436e7855ce5d2ecc7dd407f
Sha384 b020bd0cc6ce510dd4e8f41c82ac80e517824b6cbb4c86ce880624cf00816ed490c9ddfaafbec1c1a0c0bc5fe8239ada
Sha512 c9e101536b2ce93facd64c4b16eb64ee6ebcc503130fee24f4a75c7d38eff2394a07a338780e4ff52aaac6f6b3597e36320bccb1d9222a5d813e880a976e02da
SSDeep 49152:DVyrTRf6BQZtqvxcUHJKAyHLUHI9cCO2:D2+xuUHI
TLSH 67D54A17BDA048E5C09AE33289A74556BB75BC0C0B3237E72EA0BA782F727D05D35B54
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
[Authenticode]_5d4f0321.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
ID:0007
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x2A9E00 size 2392 bytes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙