Suspicious
Suspect

548e611db105d3caaefc19c8e15630e7

PE Executable
MD5: 548e611db105d3caaefc19c8e15630e7
Size: 20.47 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
20.47 MB · 20,468,254 B
Hashes
MD5 548e611db105d3caaefc19c8e15630e7 Sha1 afbeafa22ae76870fdf9470012bc61e11b8d40f7 Sha256 4e89564516749e33dba111397b5415cfb5a0e9d0eae9ad853511eda85b04e051 Sha384 0800606904b7cf6d17ea8091903493e9ba96a64d6e1acfbe1c59eecc89ef149c19d185c53d4d37ae07c1b195cc8ae962 Sha512 08ffe8bf310fabfec84c7b5e12c6a41eaab12c38d5e89d02d6f733454af10c42bd9945cf0afc2c4e4960e9df6cf768ef9f8b7bb5caf696f53013a494216af7d2 SSDeep 393216:p45OLkctXFKaNkB2DBElGP2n6WKp7OwbMIiFVQ1xJT3z34qJ0oSmet:p42kCXFzElK265pOCAVQX9kwSmC TLSH 82273301C5E257BADA378F7165B6E8AF2E3A98B13858CB0FC31588157D794D8CBDD088
Detection
PeID
ASProtect v1.32Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
24 files
EXE548e611db105d3caaefc19c8e15630e7
Structure
BINOverlay_082138ac.bin
BINResources
BINRT_ICON
BINID:0001
IMGID:1033
IMGID:1033-preview.png
BINID:0002
IMGID:1033
IMGID:1033-preview.png
BINID:0003
IMGID:1033
IMGID:1033-preview.png
BINID:0004
IMGID:1033
IMGID:1033-preview.png
BINID:0005
IMGID:1033
IMGID:1033-preview.png
BINID:0006
IMGID:1033
IMGID:1033-preview.png
BINID:0007
IMGID:1033
IMGID:1033-preview.png
BINRT_DIALOG
BINID:0067
BINID:1033
BINID:0069
BINID:1033
BINID:006A
BINID:1033
BINID:006B
BINID:1033
BINID:006F
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0067
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_082138ac.bin (20316702 bytes)
24 files
EXE548e611db105d3caaefc19c8e15630e7
Structure
BINOverlay_082138ac.bin
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙