Suspicious
Suspect

88e263f6d5e44c19cbb8bf496cc67600

PE Executable
MD5: 88e263f6d5e44c19cbb8bf496cc67600
Size: 542.72 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 88e263f6d5e44c19cbb8bf496cc67600
Sha1 994b7702037929c8e3c55785c01bd0fb0d3456dd
Sha256 a2ec6b5836353d275f96021bd670e8a91266bcda87b3885e09f317bd95c6d7c0
Sha384 f44227c9687dc4170a5a5c1f9bd5dd66a40363531cf6f3401fb386f913c9badf3ab9d7f7de546f3e33006621b9dbe7df
Sha512 ae57e4138bf815f6bfe0b2d225cba1b67e1a09227706eaac767e26e25695de429537a80325a57ba772c3fa35b59ffe94b4e728fb193d2e046964bec1525de342
SSDeep 6144:1v0s9j0RvOfflo1i5YnH5mnROwwOLrJVHuxSWzYCwAin6sopxnGD07YWaQRq5kS6:1vB9EOcCnHESWZXi6sG+zNwWaFoSuy9
TLSH CEB47C19B2A807B4E1B7C278CA538946E7F238564761CBDF03E4026B5F277E4563B722
PeID
Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.crthunk
.oldntma
CPADinfo
.gfids
.tls
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: E:\build\nw26_sdk_win64\node-webkit\src\outst\nw\nw_elf.dll.pdb
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.crthunk
.oldntma
CPADinfo
.gfids
.tls
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙