Suspicious
Suspect

538b58d3c4ee7c12821b09e47ec23e7b

PE Executable
MD5: 538b58d3c4ee7c12821b09e47ec23e7b
Size: 185.84 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 538b58d3c4ee7c12821b09e47ec23e7b
Sha1 504703d499b6e4137d1fb77890d0c47d277e43be
Sha256 bf93102794875d4338c669b64fc0ba88b23e7a494304b7b4b2fb9e1f46feec52
Sha384 2b08b41a3ef796b03098ed3f86139e6fa26fc637c54a28e50ebbb62d490909ead6059387a727b2f2820851f5c69a9bca
Sha512 e1899d5991c1a99bf2bfbbc768b7736a18cd757d8d32f462f7af7bf820e0f9eaf6ee292ec1d1bd424320f5280cb803976768fe18b7fc0549b533f442a6dc1439
SSDeep 3072:MCT00JJ1dVFc3SMBvmi9qa6RT5vXTl+flAxVQ3hZjmOLvGlSQ9HKkTJnnR13O:mWVFc3S8vmipglvaAnQ3htmOrG0QhpnW
TLSH 7C0412C765769CE8DCBA5DF1E4475D966DF1EEB36032AB061232301C58B9B0B9E00E87
PeID
Netopsystems FEAD Optimizer 1Packer=UPX Compresor..Gratuito... www.upx.sourceforge.netUPX -> www.upx.sourceforge.netUPX 2.90 (LZMA)UPX exe - NRV2E/7 compression (32 bit ) ASL sign UPX v0.80 - v0.84UPX v1.25 (Delphi) StubUPX v2.0 -> Markus, Laszlo & ReiserUPX v3.0
icon1.ico
icon2.ico
icon3.ico
helpdesk.txt
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.rdata
.data
.rsrc
Resources
RT_BITMAP
ID:008B
ID:2067
RT_ICON
ID:0001
ID:2067
ID:0002
ID:2067
RT_MENU
ID:0068
ID:1033
RT_DIALOG
ID:0065
ID:1033
ID:0066
ID:1033
ID:0083
ID:1033
ID:008C
ID:1033
ID:0092
ID:1033
RT_STRING
ID:0007
ID:1033
ID:0A03
ID:1033
ID:0A04
ID:1033
ID:0A05
ID:1033
ID:0A06
ID:1033
RT_GROUP_CURSOR4
ID:0066
ID:2067
ID:0086
ID:2067
RT_VERSION
ID:0001
ID:1033
Overlay_7d9283d6.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:03E8
ID:0
RT_DIALOG
ID:01F4
ID:1033
RT_STRING
ID:0001
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:009F
ID:1033
RT_VERSION
ID:0001
ID:1033
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_7d9283d6.bin (122861 bytes)
icon1.ico
icon2.ico
icon3.ico
helpdesk.txt
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.rdata
.data
.rsrc
Resources
RT_BITMAP
ID:008B
ID:2067
RT_ICON
ID:0001
ID:2067
ID:0002
ID:2067
RT_MENU
ID:0068
ID:1033
RT_DIALOG
ID:0065
ID:1033
ID:0066
ID:1033
ID:0083
ID:1033
ID:008C
ID:1033
ID:0092
ID:1033
RT_STRING
ID:0007
ID:1033
ID:0A03
ID:1033
ID:0A04
ID:1033
ID:0A05
ID:1033
ID:0A06
ID:1033
RT_GROUP_CURSOR4
ID:0066
ID:2067
ID:0086
ID:2067
RT_VERSION
ID:0001
ID:1033
Overlay_7d9283d6.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:03E8
ID:0
RT_DIALOG
ID:01F4
ID:1033
RT_STRING
ID:0001
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:009F
ID:1033
RT_VERSION
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙