Suspicious
Suspect

5a4ae18dd9b4e014f373e3496b4847b4

Share on LinkedIn
Print
PE Executable
MD5: 5a4ae18dd9b4e014f373e3496b4847b4
Size: 7 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 5a4ae18dd9b4e014f373e3496b4847b4
Sha1 5e265395ad38c8cfd39a99ef878c7511e16d57f8
Sha256 ebc088df0da93277c12a000aea0aff5aa184289fc7e72fee3c6fe181ec05c78e
Sha384 97fa4b5814ba3466242d3a63f74de6f7842f8f15b65a8cae57de1bd8a819d87a0ceddebb1fe9bae1af0b3be8ed0d2f86
Sha512 7e56b0f99ef6251bb8c26130e7f8880ad5d2296f0897c2d3b144e1a70a6c73ae08684a147752469e3812bf231523b57ce8871062c43997700978707d5c3d9e10
SSDeep 196608:UGgzrZjq9U6aEb2gjOBfwnmWPsCZSSzGT+9xd:cZq9b2gjOdEJvZSSvH
TLSH 1866331AF3CB0476E85099B4492680509D7A38FC4EF9E0066DB1CB5F993E9898F73B47
PeID
Borland Delphi 4.0Inno Setup Module [SFX] - v.5.x - 6.0 Borland Delphi - ASL Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12UPolyX 0.3 -> delikon
Overlay_a2b56224.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.itext
.data
.bss
.idata
.tls
.rdata
.rsrc
Resources
RT_ICON
ID:0001
ID:1043
ID:0002
ID:1043
ID:0003
ID:1043
ID:0004
ID:1043
RT_STRING
ID:0FFB
ID:0
ID:0FFC
ID:0
ID:0FFD
ID:0
ID:0FFE
ID:0
ID:0FFF
ID:0
ID:1000
ID:0
RT_RCDATA
ID:0000
ID:1033
ID:0
ID:2B67
ID:0
RT_GROUP_CURSOR4
ID:0000
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_a2b56224.bin (6881096 bytes)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙