Malicious
Malicious

831cb3f72fc54a8de96dac5bc128339d

PE Executable
MD5: 831cb3f72fc54a8de96dac5bc128339d
Size: 9.44 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 831cb3f72fc54a8de96dac5bc128339d
Sha1 842ddc82d86541230cc79fde5e9a203347817e10
Sha256 d15749fb8cc4fd3f4b9214197a40218d6428e3a973740c394dfb85a852a4aec9
Sha384 b442b7e2464359743fdd9219fa33cc4c0d14f4872a017b99541f536dab1800ce38fbe0ed0e691964d7aafdfb7621ea45
Sha512 be5f0f0bcd5f1eafe2de8d29c2c65ecf9afde073d47cb01e36a750e634a2fb4e3580bea055c7c0f5c193432e618085e877f486288ad2f69860c6e21e836050f0
SSDeep 49152:osB7F98dX4ASHS+Y7ST8Aot2kg2Sufmryob63CzJlG+NyCDirz1QQ6amkqgt9u5U:oaA2b2FmGQJFN/DOyum9gt9CqUqQpA
TLSH 40965A0BBA51A1A4C095EE34C2764211A7743D4DC33937FB1EA1EA742F267C2AEB5F14
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
[Authenticode]_b9ed9cf1.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
ID:0008
ID:0
ID:0009
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0000
ID:0
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
3 / 3
Path pe:exe~T1027~T1055>pe:rsrc>bin
Shape pe:exe>pe:rsrc>bin
malicious 3 nodes
Path pe:exe~T1027~T1055>pe:rsrc>img
Shape pe:exe>pe:rsrc>img
malicious 3 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x884600 size 8064 bytes
[Authenticode]_b9ed9cf1.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
ID:0008
ID:0
ID:0009
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0000
ID:0
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙