Suspicious
Suspect

5c1a89b8321ee6860904a4b4b50369e2

PE Executable
|
MD5: 5c1a89b8321ee6860904a4b4b50369e2
|
Size: 4.86 MB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
5c1a89b8321ee6860904a4b4b50369e2
Sha1
47486921755748e7233c75bd7f247ef71a311b62
Sha256
1b95497b3247ace77bd2c28c96803a47f69ec7d35ad84dde377d1ee3684193c5
Sha384
53b07f0c9cac9fb9dd83ccedd3f0298e76fa155eba8b0320568c594d4d3006088ed938c80e5a2c3148d3dbac8cb13b11
Sha512
41f6867f7c90cb9c2166202b69d1ec6b80bb3a56ed546c72be916df603619d25b4ae5c405ab52316c9eefadde4a666a4dab41af9e5271df7b42497262a73a163
SSDeep
98304:8P5Hiumpi1h7gpajXTyHp7garhhKxXwPhLvC7QNw:8P5iummh3HyJR2XwBKQNw
TLSH
022633327EA5A0F9DD9303714EF08EC35DE9FA241F3906CB4B842C57B6266C6953E186

PeID

Microsoft Visual C++
Microsoft Visual C++ 5.0
Microsoft Visual C++ 6.0 DLL (Debug)
Microsoft Visual C++ v6.0
Microsoft Visual C++ v6.0
Microsoft Visual C++ v6.0 DLL
File Structure
5c1a89b8321ee6860904a4b4b50369e2
7z-stream @ 0x000228DE.7z
[Authenticode]_6ddf9b6c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
Resources
RT_ICON
ID:0001
ID:1049
ID:0002
ID:1049
ID:0003
ID:1049
ID:0004
ID:1049
RT_GROUP_CURSOR4
ID:0065
ID:1049
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:1033
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

Authenticode present at 0x49EAB0 size 15816 bytes
5c1a89b8321ee6860904a4b4b50369e2 (4.86 MB)
File Structure
5c1a89b8321ee6860904a4b4b50369e2
7z-stream @ 0x000228DE.7z
[Authenticode]_6ddf9b6c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
Resources
RT_ICON
ID:0001
ID:1049
ID:0002
ID:1049
ID:0003
ID:1049
ID:0004
ID:1049
RT_GROUP_CURSOR4
ID:0065
ID:1049
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:1033
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙