Suspicious
Suspect

91e1b049b8ca984a738f81a4a6a5f741

PE Executable
MD5: 91e1b049b8ca984a738f81a4a6a5f741
Size: 3.62 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 91e1b049b8ca984a738f81a4a6a5f741
Sha1 24046dcf126262b57647b9dc517d8630b9377322
Sha256 d3a77efd9b454c113b91535987010bf93df630ef63e51fbe599321e2bc399024
Sha384 e0269e18fc890d08d70f08e39a20fcff5052ec734b6581d5f9a21acee7911a7cb82b66cf9d9dbde064677a6859d9a5e3
Sha512 c777debf66c0f14673f86177a0029875969b4b0a8789fa77cb38b534f7fa8443e71ad34deef0371ab068ca3b1d010df3e41ff74ba5fd930c72468a7e585a406a
SSDeep 49152:ExWumOENO+A/iV+eSAbfJdgwocjythgW02RDXMWtyEal/BrP37mRM3Sb9cje6VWV:OG3VlSm4woAytR0sD7tbcBrP6ME9UZs
TLSH 4CF512476AC300B1D46ACF30AC36A917E9ADFF8C8418D129278577AC617772E859FBC4
PeID
Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.we15y
.wgpIv
.KOwRN
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:7F00
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.we15y
.wgpIv
.KOwRN
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:7F00
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙