Suspicious
Suspect

560ff4e834c9a3349fc8bcd782d37f78

Share on LinkedIn
Print
ZIP Archive
MD5: 560ff4e834c9a3349fc8bcd782d37f78
Size: 12 MB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 560ff4e834c9a3349fc8bcd782d37f78
Sha1 b50f35774c21d50ab8ddd32f8f7255837e51da2e
Sha256 b5efab6f769d2a7d131997cac51159833fb09592048a78a6c0ab00ef90c62d53
Sha384 e86931f59a5b64d00817d4e586cc8878aa404508f6ac83cb7d69482dc9121c38f3e260fc717eb7aba773bdda7d16fc8a
Sha512 e06f1b6ac3af656ecb4d6ab469c7a2a578e138e10c5efe753fb8166c8d9baef73c5a8c97f98cad368c4b744df37f4c002586142aede52b429fad936918f3d99f
SSDeep 196608:hl0h6nHrY2XhxasNF4ZUquOJF9rFBNs4e1eWVk4IUDMXPXCQ1xoHWlMfZ:hShIj5F479rls/V6lf1x6WaZ
TLSH 37C633A415E407B06A16C533BF816B54E78E2EE5BBD329DF36F786C49582078A0374CB
560ff4e834c9a3349fc8bcd782d37f78
交易紀錄_安裝檔_v1.0.2.exe
Overlay_b5c03cd1.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.itext
.data
.bss
.idata
.didata
.edata
.tls
.rdata
.reloc
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
ID:1033-preview.png
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
ID:000D
ID:1033
RT_STRING
ID:0FF5
ID:0
ID:0FF6
ID:0
ID:0FF7
ID:0
ID:0FF8
ID:0
ID:0FF9
ID:0
ID:0FFA
ID:0
ID:0FFB
ID:0
ID:0FFC
ID:0
ID:0FFD
ID:0
ID:0FFE
ID:0
ID:0FFF
ID:0
ID:1000
ID:0
RT_RCDATA
ID:0000
ID:0
ID:2B67
ID:1033
RT_GROUP_CURSOR4
ID:0000
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
An error has occurred. This application may no longer respond until reloaded. Reload 🗙