Suspicious
Suspect

8b62fe40e4b71b3a5c49950a0cd764a8

PE Executable
MD5: 8b62fe40e4b71b3a5c49950a0cd764a8
Size: 27.08 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 8b62fe40e4b71b3a5c49950a0cd764a8
Sha1 dfd9756ff0a8b63065df2ebcca46b50b1dedc3fe
Sha256 bfa94d333bf0b694d7ca7cee5dbe1d0bf4edc1d3b169876a3f58e7a1ed217cc8
Sha384 dc8184b9bcfe9e99d9e9fbf646d88277aa3335991190f219290bbf149281aad857e8587f4c226f0389addf0f087f103a
Sha512 83137ae3dabab680a31e7363b217ffd26981957d46d39092b76c8bc39376dcf2ab423f62ffb1604c620541c44c8c82a69fa7ae58a79c74becf61974908956d81
SSDeep 393216:QEwZ8m5OkHUd1jITSjw2QgyXIW5riQfQcP14XlZWZbOu8:VGOEI85nfQc9mlubG
TLSH 0F57A051F70B05F6FF434C3645F96B2F7B39E2DC8974C55AE828242ABAA3C1B459C290
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamUPolyX 0.3 -> delikon
[Authenticode]_e45ef51f.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.tls
.rsrc
.reloc
Resources
RT_ICON
ID:0000
ID:1033
Overlay_5333cf28.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.rsrc
.reloc
4
19
31
45
57
70
81
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

6 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 4img 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x19D3600 size 1720 bytes
[Authenticode]_e45ef51f.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.tls
.rsrc
.reloc
Resources
RT_ICON
ID:0000
ID:1033
Overlay_5333cf28.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.rsrc
.reloc
4
19
31
45
57
70
81
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙