Suspicious
Suspect

PE Executable
MD5: 806bdfab1173f8aada9ac10d8cb29e04
Size: 574.49 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 806bdfab1173f8aada9ac10d8cb29e04
Sha1 5558b33bc022ec29fad3bed8f816c0ca5afe515a
Sha256 281eced5dcc571bf7752573b6083f64e359ff5fdf688c7b5417bda8ae4201c16
Sha384 75bdfc2d01131676dc660a0b960d21e84d91652a440b15c59f8caf501dd930890882b4c8ee5226ccf611ec8d87bdef6f
Sha512 efe59be8a73fb8bd96bf5e43f668a59dbd0932509f1f18d51c3b248263de64c1f3112d9d8b729d251eacd935a4c45d179ed3886d29a3141c429326bf6ff9ddb9
SSDeep 6144:cZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq5a:qquCuygMQjd5vJIBP1J
TLSH D3C4122B1B2C9933D6550B7B8EE5EB3461BFF5512733D6D30B009A9DAD232803E26752
PeID
Stealth PE 1.01 -> BGCorp
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.PwM
.OwvyT
.MTxF
.XWRUxX
.data
.YCYo
.tKhtUt
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
RT_DIALOG
ID:004E
ID:1033
RT_STRING
ID:00A2
ID:1033
ID:00CA
ID:1033
ID:00F3
ID:1033
ID:010B
ID:1033
ID:0146
ID:1033
ID:01F5
ID:1033
ID:02E5
ID:1033
ID:02F4
ID:1033
RT_RCDATA
ID:00A0
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.PwM
.OwvyT
.MTxF
.XWRUxX
.data
.YCYo
.tKhtUt
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
RT_DIALOG
ID:004E
ID:1033
RT_STRING
ID:00A2
ID:1033
ID:00CA
ID:1033
ID:00F3
ID:1033
ID:010B
ID:1033
ID:0146
ID:1033
ID:01F5
ID:1033
ID:02E5
ID:1033
ID:02F4
ID:1033
RT_RCDATA
ID:00A0
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙