Suspicious
Suspect

658cb87887c1aa843e39aea3aab26073

Share on LinkedIn
Print
PE Executable
MD5: 658cb87887c1aa843e39aea3aab26073
Size: 17.83 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 658cb87887c1aa843e39aea3aab26073
Sha1 dc223e5e27e3bcc1cc636aa2b9567540868cc6ef
Sha256 5f76fc369f3f759a64fe0770294a303c918c1dca5af021ba9ea0bbc7ab2559f6
Sha384 e22c3b46ba84bca028826fcc374f011b4d1baa7e6920f7ae805094aec04a4e69d8353a4d450070433002f4fa6eb72536
Sha512 2f80b57d612279704b93895b251831022f09721f900c3b28f84aa4161ca20762968147028f8e9fc1a6ffc8763f3074d2b782326851fc2d59c5c8622de8c1214a
SSDeep 393216:YJSSRC8g954fV7n/YQ/toBGBUokPNXVu/QhDbzFbSx3TKBHfGM2a8Z:USSRtgHQFOBGBUxPDMQ5FbSCfGPdZ
TLSH D1073333B389683EE07E1A395977A114583B7B516C178D0A96F4086CCF2A1B17E3B74B
PeID
Borland Delphi 7 - Nstd EP - ASL sign Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12UPolyX 0.3 -> delikon
Overlay_2f60e684.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.itext
.data
.bss
.idata
.didata
.edata
.tls
.rdata
.reloc
.rsrc
Resources
RT_ICON
ID:0064
ID:1033
ID:0065
ID:1033
ID:0066
ID:1033
ID:0067
ID:1033
ID:1033-preview.png
ID:0068
ID:1033
ID:1033-preview.png
RT_STRING
ID:0FF5
ID:0
ID:0FF6
ID:0
ID:0FF7
ID:0
ID:0FF8
ID:0
ID:0FF9
ID:0
ID:0FFA
ID:0
ID:0FFB
ID:0
ID:0FFC
ID:0
ID:0FFD
ID:0
ID:0FFE
ID:0
ID:0FFF
ID:0
ID:1000
ID:0
RT_RCDATA
ID:0000
ID:0
ID:2B67
ID:1033
RT_GROUP_CURSOR4
ID:0000
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_2f60e684.bin (16945744 bytes)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙