Malicious
Malicious

54a6dc6206bc525ae4a56c3949aa0e0c

PE Executable
MD5: 54a6dc6206bc525ae4a56c3949aa0e0c
Size: 4.15 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 54a6dc6206bc525ae4a56c3949aa0e0c
Sha1 ae31068fb0a8da2e60d2f230e8c3cfd6394fe990
Sha256 d94214ed25882583b91f7e73971029cdcbe540a4bd0a8563f509ea7ad39443ec
Sha384 d31e9eae346f633b28806dcf941a6d0df5b8dfd96cff7d109fd7cd710c144f15e244566a9f27ad33415273d2eda93211
Sha512 eb32e4583a2d7799553287167d011897a5e802dabff651d080a5825c9eff29cf2dff0241ebd246bc7843c7e5302b34f61198d383f082ce42ece207936e5be795
SSDeep 49152:Z0NkBUv37GZtbL6WRToh21SnmWL+WUrj2cE/xuk8:ZtHtf+21WmWL+zEgk8
TLSH C3168C07BD9158B9C099A23288B296517B7CBC0A1F3327D33E94777A2E767D02D7A314
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamUPolyX 0.3 -> delikon
[Authenticode]_87c034ff.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
4
19
31
45
57
70
81
92
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:dll~T1027~T1055>bin
Shape pe:dll>bin
malicious 2 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x3F4570 size 2416 bytes
[Authenticode]_87c034ff.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
4
19
31
45
57
70
81
92
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙