58d5d93955a8e4298e4b9710af8bb166

PE Executable

MD5: 58d5d93955a8e4298e4b9710af8bb166

Size: 1.72 MB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	58d5d93955a8e4298e4b9710af8bb166
Sha1	a2251a9fb3f45f434597933f48e7e1c00410bb93
Sha256	beb991401d05d83ffcd93fc92b3fe2c522493dfb4afc4fd08b6f59c73b09c86b
Sha384	586a70b61b1c41c748b2ebb88599148d0215627a9dae897e2e493a71bedbd557e60f6fcee1bf3b08de525156ff2de60f
Sha512	1bb405d5e8e68b2d06607c5c869328746d4039c171957c0a30dea0c329d72e68d63ccc54e1302635c3106ad070292408f0f4372abd2342b9236f9ccab98c541f
SSDeep	49152:YIGR+Fxs2McWixj/VxK8ZvilqCVTa4Y+etIR++zxJBFE:8ILs2MPkjtxKOdCV3eM+aw
TLSH	908533A54ADD4027E897DEF03AC908B68EF13DA101F0C81AA3258F4CB9F5D27915D6B7

PeID

Microsoft Visual C++ v6.0 DLLNullsoft PiMP Stub -> SFXUPolyX 0.3 -> delikon

Name	Value
Info	PE Detect: PeReader FAIL, AsmResolver Mapped OK
Info	Authenticode present at 0x1A1F1E size 11176 bytes
Info	Remap: Mapped -> FileLayout (RAM only) as [Rebuild from dump]_27ce7e01.exe

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

No malware configuration was found at this point.

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

58d5d93955a8e4298e4b9710af8bb166

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

58d5d93955a8e4298e4b9710af8bb166 › [Rebuild from dump]_27ce7e01.exe

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

You must be signed in to view YARA rules.