Suspicious
Suspect

52dd0fc6a11f497d828e004a12864302

Share on LinkedIn
Print
PE Executable
MD5: 52dd0fc6a11f497d828e004a12864302
Size: 4.13 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 52dd0fc6a11f497d828e004a12864302
Sha1 d73fe71cc3b7611824187cd2bfce84ed4f4cad4d
Sha256 f602e35d3504b19c720fe340f554a3d9bc99b7c0d9639732ba8ffaa9dfd41f4f
Sha384 c82ee682cdf1193cea13f06e3d1dbb58c8b7122cda160a6e85b817951bddde47f64ee9fde53467c77bbcdbc7537df485
Sha512 6bc5c875ed723557a225d015b554a14fb41050aa98c0d3834106a45286f3d895bfc8e5930c14674b0ec62d7528d89485c8f2f8188334853245bbddccea7b0d32
SSDeep 98304:9TzPXAepr2GIVsko/mfRyIZWCA0WzOdJ0y6hHBo3lBQsRlb+pk7KvYry:93YbG+o+f4CA2dJ0t2QsRZ++OKy
TLSH 411633546F02E091FBF40873B7211559598E87A246E32E0E3BACC65EBD1BD58A30EF4D
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
Overlay_7ac9da08.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
RT_DIALOG
ID:0067
ID:1033
ID:0069
ID:1033
ID:006A
ID:1033
ID:006B
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_7ac9da08.bin (4073395 bytes)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙