Suspicious
Suspect

6eb55297620741e8575d4ed7121298a2

PE Executable
MD5: 6eb55297620741e8575d4ed7121298a2
Size: 388.81 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 6eb55297620741e8575d4ed7121298a2
Sha1 a3dc49fbf9301603a97dbe3fb9188b1efba5a19b
Sha256 a225574dedd7ff1273e00bdf36786663a73788cc662ff54980eb56e6b317dbc5
Sha384 e54a18092d773994b1212e82d881571f71b6671fbdb7b22a06baafbc56e8abdb8927c08e254e6628dca7963f410f4de8
Sha512 7935b2c43bc8ab5fc2a39e6a2469ed422e5a3af809b7b1b6400af93f9d7997acf7accb3c0f2307f202c25b106fc61b6773e038287f9088a5f460b249cf42a2e3
SSDeep 6144:vwq3Nplp8rtzZ3vxjmMAQFEY86jgGf5LYR1tQ73cnfU71437AqfpwOvnttusYUTm:vzhufPAgEYFV0KOVw7UTA5
TLSH 9884BF423D0CA5DBED3D6372296785862FB4747A4B9216AFBAAFF21648413134E1FD0C
PeID
Installer Nullsoft PiMP Stub v.3.0.x - A.S.L Microsoft Visual C++ v6.0 DLL
[Authenticode]_3f0edb4c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
Resources
RT_BITMAP
ID:006E
ID:1033
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
RT_DIALOG
ID:0068
ID:1033
ID:0069
ID:1033
ID:006A
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x5DC08 size 4800 bytes
[Authenticode]_3f0edb4c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
Resources
RT_BITMAP
ID:006E
ID:1033
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
RT_DIALOG
ID:0068
ID:1033
ID:0069
ID:1033
ID:006A
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙