Suspicious
Suspect

78b6e15065dba4e35b56b32ee15b932b

Share on LinkedIn
Print
PE Executable
MD5: 78b6e15065dba4e35b56b32ee15b932b
Size: 4.05 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 78b6e15065dba4e35b56b32ee15b932b
Sha1 5c9653c8915831ff1b4868e0dcbea0c0e431ad76
Sha256 ab0c6d4640de59c97bcdf9bab4a6cba7523b7d4e48bf56c729ecba9e0c5dd6d1
Sha384 4afc081d83bb6091be0862bfb61a12f5d8535b2fd317903353688c7e1639b1a7acee3c8898f1757051c42e079f21a207
Sha512 a809cf10fc12bea87374fc5dcfcc4ace8d8e19c8c05ae0291750c6a6c40f3ce5667e3418509c1ca27314ac33978321cfea71ea1ba9637217e944af5e208c9dd9
SSDeep 98304:JZt8q8z6L6IOJmGX8fnkJRKfe4frahk/JEZZdJffniGbJ4:Tt8qbzGmGXhKfFEk/JEfdpiKm
TLSH CA162389F247D0F5ED1309F0014BF7BF6631F521C8129CB7EAD44C66E8B5AA28E5A721
PeID
Microsoft Visual C++ v6.0 DLLUPolyx 0.4 -> delikon
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rdata
.bss
.idata
.CRT
.tls
.rsrc
.reloc
.00cfg
Resources
RT_STRING
ID:0007
ID:1033
RT_RCDATA
ID:00B9
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙