Suspicious
Suspect

78b6e15065dba4e35b56b32ee15b932b

PE Executable
MD5: 78b6e15065dba4e35b56b32ee15b932b
Size: 4.05 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 78b6e15065dba4e35b56b32ee15b932b
Sha1 5c9653c8915831ff1b4868e0dcbea0c0e431ad76
Sha256 ab0c6d4640de59c97bcdf9bab4a6cba7523b7d4e48bf56c729ecba9e0c5dd6d1
Sha384 4afc081d83bb6091be0862bfb61a12f5d8535b2fd317903353688c7e1639b1a7acee3c8898f1757051c42e079f21a207
Sha512 a809cf10fc12bea87374fc5dcfcc4ace8d8e19c8c05ae0291750c6a6c40f3ce5667e3418509c1ca27314ac33978321cfea71ea1ba9637217e944af5e208c9dd9
SSDeep 98304:JZt8q8z6L6IOJmGX8fnkJRKfe4frahk/JEZZdJffniGbJ4:Tt8qbzGmGXhKfFEk/JEfdpiKm
TLSH CA162389F247D0F5ED1309F0014BF7BF6631F521C8129CB7EAD44C66E8B5AA28E5A721
PeID
Microsoft Visual C++ v6.0 DLLUPolyx 0.4 -> delikon
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rdata
.bss
.idata
.CRT
.tls
.rsrc
.reloc
.00cfg
Resources
RT_STRING
ID:0007
ID:1033
RT_RCDATA
ID:00B9
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rdata
.bss
.idata
.CRT
.tls
.rsrc
.reloc
.00cfg
Resources
RT_STRING
ID:0007
ID:1033
RT_RCDATA
ID:00B9
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙