Suspicious
Suspect

858d6d91e6d04cb26acb51fcb516f9c1

Share on LinkedIn
Print
PE Executable
MD5: 858d6d91e6d04cb26acb51fcb516f9c1
Size: 15.32 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 858d6d91e6d04cb26acb51fcb516f9c1
Sha1 6790e1cbf6798382504915d09bbf8b5aacc10dfe
Sha256 0d4755125431b2df6a5232950b6c475bb6ae459a35503d64a6bc2c8075f5e2e5
Sha384 1f5ca1cf8943266919ed4c202d938973b1e6e198c3c0c66974b8655ca7361c4790e73da81539b3018bab75534c7a700e
Sha512 9c38f256706683f6780032f06d7b15a34481cb2cb9c65e9cb2e57adbb5e521e2165d49edfc3302b18c249b4afe76c28cd90e35465356a0a9b8cbb5d741b48700
SSDeep 393216:xxVCkFeObsJGHu9zwkXiJlrWqMudtVzBNdzV3:xxV7FtluRXFxudrzlR
TLSH C2F6334225E634E7F273A3B47C7BA9386A13CC359AA707A00384F5E5BC5574528B72CB
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
Overlay_d8972026.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
ID:0007
ID:1033
ID:1033-preview.png
ID:0008
ID:1033
ID:1033-preview.png
RT_DIALOG
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_d8972026.bin (15213691 bytes)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙