Suspicious
Suspect

52fa7af4aca3c59e62d731460f86502e

PE Executable
MD5: 52fa7af4aca3c59e62d731460f86502e
Size: 6.14 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 52fa7af4aca3c59e62d731460f86502e
Sha1 a9fe6cbb68d05f4710b2122ffc0b886af310e5b7
Sha256 521e714bdc7fdbdc9789aaac1beec6ca63b936e613bc606e2c341d1d8ced64d0
Sha384 f863c77acf64fca4199542fc7ead5ac35c53ec07ac23e67e1cfb4c5533a414016858359e44b2362bfd74566de2306f07
Sha512 5af7f0a695eec1ddf4aa08f60ebb9104f3e70e8abb99fd66d3f051d7fa81b37725562359af1774999bb79b7a5fdbd447ca58f4d0dd63ab4493654e7ad4e96bbb
SSDeep 98304:cRQh83E1fnf7TN+c8Wl6B+Ip9L1P00wbPRTiZfI8E6dnH+Rz664l:cRQh83EdTTN+c8WlIxhP0VROZAR6dnC0
TLSH FF56013AF716484AF02F037B4592D3A5C5512B80E635A2E706B1AF53BAF35C21FA5EC1
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
RT_RCDATA
ID:00C9
ID:1033
ID:00CA
ID:1033
ID:00CC
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0066
ID:1033
ID:00CB
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: C:\Users\prostone\Desktop\all\Malware-67-main\Release\SF-Verif.pdb
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
RT_RCDATA
ID:00C9
ID:1033
ID:00CA
ID:1033
ID:00CC
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0066
ID:1033
ID:00CB
ID:1033
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙