Suspicious
Suspect

6ddb8c5daf31b97424251e0c8c2e8419

Share on LinkedIn
Print
PE Executable
MD5: 6ddb8c5daf31b97424251e0c8c2e8419
Size: 3.2 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 6ddb8c5daf31b97424251e0c8c2e8419
Sha1 50bdc5bfa729a075542c4a25bcb07b76ceae0f93
Sha256 348bd3cea6fd6c25c6d1e2e3d98a1f7764e280867230bd5802af84b8b3bc33ea
Sha384 434da2ce988079ca1b00445c2517be31bbcbb41a26eb7a40fcb413e2e5df56672d4152ecb05f9a5b56a328274f5f4c28
Sha512 660bab0bf26016891a4bd1f5cb8aac3ace3a6d93e0469604324ed192424a4f20da9f83bba0417d0c074827b997a7c9ba4e619e0e350d59333784da3993ea48cf
SSDeep 49152:guI2hgJumaLQEp7rvZcn6HE4+Ymy+vvRbHR6a8CXcNoW9JZGs:g5O4uPdp7rvxHGYmyo36NCXXW7r
TLSH E7E5D02B9642E6FEE01909393479D10009377E52A8480CDBDAF8FD9CA7335753A2E776
PeID
Borland Delphi 7 - Nstd EP - ASL sign Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12UPolyX 0.3 -> delikon
Overlay_29f084dc.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.itext
.data
.bss
.idata
.didata
.edata
.tls
.rdata
.reloc
.rsrc
Resources
RT_ICON
ID:0064
ID:1033
ID:0065
ID:1033
ID:0066
ID:1033
ID:0067
ID:1033
ID:0068
ID:1033
ID:0069
ID:1033
ID:006A
ID:1033
ID:006B
ID:1033
RT_STRING
ID:0FF5
ID:0
ID:0FF6
ID:0
ID:0FF7
ID:0
ID:0FF8
ID:0
ID:0FF9
ID:0
ID:0FFA
ID:0
ID:0FFB
ID:0
ID:0FFC
ID:0
ID:0FFD
ID:0
ID:0FFE
ID:0
ID:0FFF
ID:0
ID:1000
ID:0
RT_RCDATA
ID:0000
ID:0
ID:2B67
ID:1033
RT_GROUP_CURSOR4
ID:0000
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_29f084dc.bin (2045038 bytes)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙