Suspicious
Suspect

5efca39b93a87eeddac34b384725d16d

PE Executable
MD5: 5efca39b93a87eeddac34b384725d16d
Size: 2.55 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 5efca39b93a87eeddac34b384725d16d
Sha1 63687fb994e368b3b6c3a0afbdfc37d93559669d
Sha256 440789c3674469c66bbdcb706c8fc7af666b67cfb1fba4ae4886bc94b66aeaef
Sha384 ea77fd071e6d72d0a8daa54c58635073ef3276eec6794b80d87b88590c6fafeea3d74f27336b7f0c697013ac21175aa1
Sha512 146ba333b22202ca6a206ec21aca4efabe663941fa1f9df463beb35b0053ef6b6dbcb3887ea866875a998c5d1bd64175e8c36520d2f48c49029018dc9d9fb6c2
SSDeep 24576:x7pxugvZkqGyGEwjQ498inZml46wvi86XpfEXBelesaKDQepY4sTG3oFB:x7pxxv2qGawk49bZkY96m5e3o7
TLSH 5AC56C07FDA1C8B5D0AB92318972A2917B30BD452F2123CF2A90B7792FB27D05975778
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft Team
[Authenticode]_49edc24a.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.eh_fram
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0-preview.png
ID:0003
ID:0
ID:0-preview.png
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0-preview.png
ID:0006
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x26A200 size 14080 bytes
[Authenticode]_49edc24a.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.eh_fram
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0-preview.png
ID:0003
ID:0
ID:0-preview.png
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0-preview.png
ID:0006
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙