Suspicious
Suspect

58d7ba83d08329ef89de7baab8446203

PE Executable
MD5: 58d7ba83d08329ef89de7baab8446203
Size: 9.92 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 58d7ba83d08329ef89de7baab8446203
Sha1 1dcf39bf8dad89b59f88e97e40aa845b1f59de58
Sha256 691cdd49330e86b756bee4057a1f5a777f021ebe82e95b7934996023c50da454
Sha384 3b82c7af8505c4933a91564440e28bbea17123ab1512826e54f08c8a606aea807add9cc27fb7faa6dafa8a3f0cf23508
Sha512 89a8c3d6dff32eaeeb08fdbe143087c5876a83bb7867955da6f273297b2764d8eaeef49229b5d49497fb0ed4bd44cf1a52b55c3629a37e666862a772ec4b5d86
SSDeep 98304:FfO8moJlHC+MGfH5unvoJZ5cCC19OZmMDyio1foCzE8X:F/dJliXGwCC16bDE1foCg8X
TLSH D6A65B4BECA955E8C0AEC13589739113BB717C490B2223D71B60F7246F76BD46EB9390
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
[Authenticode]_b76c2817.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
ID:0007
ID:1033
ID:1033-preview.png
ID:0008
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0002
ID:1033
ID:7F00
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x975200 size 7664 bytes
[Authenticode]_b76c2817.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
ID:0007
ID:1033
ID:1033-preview.png
ID:0008
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0002
ID:1033
ID:7F00
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙