Suspicious
Suspect

6774a6e09bd43c9d39d4ec4925aba89e

PE Executable
MD5: 6774a6e09bd43c9d39d4ec4925aba89e
Size: 26.22 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
26.22 MB · 26,215,088 B
Hashes
MD5 6774a6e09bd43c9d39d4ec4925aba89e Sha1 b5af4231bd361a54482362b88ac33327cf031710 Sha256 11e4ccefaf677d160fdb49e25c8ccb58c24e50824a0e1b87791bcb70393513d3 Sha384 4b8fe4ffb60b63d7eae8d56a1d92b554473dccff362232536832058030ad2cbf4c0ca9db6bae64b01b12a7d8452ef9dc Sha512 a62fc5693234f7b737ac89aea7ab84ac934df746a53b12bbb2cdfea72ee523d16828fc142fa74022373b1b3da0e7c1b68094ce3d876b2651def2552895fa9ef0 SSDeep 393216:ngut0VbKPNbBTrusfHDSqokkpzwZIrkN/ttC8eIOtM6C3eHFibGK/NcZB5wIVl:nJ3UB3y6eeHFibGaNcZbx TLSH A247AF51B30F05F6FA434C3645FAAB2F7B39E2DC8974C559E434342AB6A2C1B86DC291
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamUPolyX 0.3 -> delikon
20 files
EXE6774a6e09bd43c9d39d4ec4925aba89e
Structure
P7B[Authenticode]_7fabff0a.p7b
BINResources
BINRT_ICON
BINID:0000
BINID:1033
Structure
BINOverlay_39e8c96b.bin
BIN(folder)
BIN4
BIN19
BIN31
BIN45
BIN57
BIN70
BIN81
BINResources
BINRT_ICON
BINID:0001
IMGID:1033
IMGID:1033-preview.png
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0001
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
BINID:0001
IMGID:1033
IMGID:1033-preview.png
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0001
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

6 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 4img 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x18FFC00 size 1712 bytes
20 files
EXE6774a6e09bd43c9d39d4ec4925aba89e
Structure
P7B[Authenticode]_7fabff0a.p7b
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙