Suspicious
Suspect

5e1fae98ae8ccd1486c6a1e0a9f9fa9c

PE Executable
MD5: 5e1fae98ae8ccd1486c6a1e0a9f9fa9c
Size: 1.07 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 5e1fae98ae8ccd1486c6a1e0a9f9fa9c
Sha1 618b2dabe5de46ace4f88ae86efd280ca53bf1f0
Sha256 b3574f6784185a5f56b52714aeb883cdc42527d8aa4ffcbbfc218210ce8d7c43
Sha384 42efce5dfdffd0fd3b4033e0b7c1a719e38126a736f729fed79a1c349886f9e6f0f52e90ff96a3ed475675e67e6bbf16
Sha512 2d6b9336d21a9cc47d4d2a6b2862635e0f0886afbc9c4d69e2dfb79f72ae917b7b9ad406336e695c454495c838b423c7745b7877914abdc391d972e482f72a9d
SSDeep 12288:uvIYpnXTNyzcOs9mSxqj8u+hxTyLl6vWlNrrFlhuPFV9r:ugYpnXTIzczfqgthBFqPF3uPX9r
TLSH D9357C1AD77551E8D53BC23C89B25622F9727C0D9330A6DB479987A51F23BE0AB3E310
PeID
MASM/TASM - sig4 (h)Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
Resources
RT_ICON
ID:00B1
ID:1033
ID:00C8
ID:1033
ID:1033-preview.png
ID:00C9
ID:1033
ID:1033-preview.png
ID:00CA
ID:1033
ID:1033-preview.png
ID:00CB
ID:1033
ID:1033-preview.png
ID:00CC
ID:1033
ID:1033-preview.png
RT_MENU
ID:0095
ID:1033
ID:00C2
ID:1033
RT_DIALOG
ID:0043
ID:1033
ID:0051
ID:1033
RT_FONTDIR
ID:0040
ID:1033
RT_FONT
ID:00AF
ID:1033
RT_GROUP_CURSOR4
ID:0065
ID:1033
RT_VERSION
ID:0001
ID:1062
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: D:\Build\pdb\20260817.pdb
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
Resources
RT_ICON
ID:00B1
ID:1033
ID:00C8
ID:1033
ID:1033-preview.png
ID:00C9
ID:1033
ID:1033-preview.png
ID:00CA
ID:1033
ID:1033-preview.png
ID:00CB
ID:1033
ID:1033-preview.png
ID:00CC
ID:1033
ID:1033-preview.png
RT_MENU
ID:0095
ID:1033
ID:00C2
ID:1033
RT_DIALOG
ID:0043
ID:1033
ID:0051
ID:1033
RT_FONTDIR
ID:0040
ID:1033
RT_FONT
ID:00AF
ID:1033
RT_GROUP_CURSOR4
ID:0065
ID:1033
RT_VERSION
ID:0001
ID:1062
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙