99b470e6d8bc6ca19d2aa9c24b0f42f1

PE Executable

MD5: 99b470e6d8bc6ca19d2aa9c24b0f42f1

Size: 7.72 MB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Portable Executable file

Size

7.72 MB · 7,716,864 B

First seen

2026-08-18 12:31 · 2 months ago

Last seen

2026-08-18 12:31 · 2 months ago

Last analysis

2026-08-18 12:32 · 2 months ago

Hashes

MD5 99b470e6d8bc6ca19d2aa9c24b0f42f1 Sha1 61143ecaed7be6891a63f926f7e5b0930109571e Sha256 e65c9c842dc86d9a1742a025f059c7a4c45a65a52f41c2a30711278498d8ea27 Sha384 247c5748fea1f1dbd2dad0a6a62e72a972d3194ebe0890cd4a289aaf367812f4fbbf22d96373e9dc7c699685e0fe726f Sha512 9afc298566bfd5837ec4c34e14e3a464c344ba41dcb10424d9d40b6814ee4a277ed95e17fec100694587900f4a8476ec434281e559cb8048fa223447990b9244 SSDeep 196608:pHIj5cYgPOmsAiG50keVG5JHWJx4VfBd5JKbyss9nGZqn:pHIjGjOmL6kenLQX58esgGZO TLSH B376330BD2FE42A7DD34967429B8469345B23CC3AB76C2EF46E8C89C1531EE0D5B6721

Detection

PeID

Microsoft Visual C++ 8.0 (DLL)UPolyX 0.3 -> delikon

2 malicious · 381 files

EXE99b470e6d8bc6ca19d2aa9c24b0f42f1

Structure

BINResources

BINAVI

BINID:0BB9

BINID:1033

BINRT_ICON

BINID:0001

BINID:1033

BINID:0002

BINID:1033

BINID:0003

BINID:1033

BINID:0004

BINID:1033

BINID:0005

BINID:1033

BINID:0006

BINID:1033

BINID:0007

BINID:1033

BINID:0008

BINID:1033

BINID:0009

IMGID:1033

IMGID:1033-preview.png

BINID:000A

BINID:1033

BINID:000B

BINID:1033

BINID:000C

BINID:1033

BINID:000D

BINID:1033

BINRT_DIALOG

BINID:07D1

BINID:1033

BINID:1049

BINID:2057

BINID:07D2

BINID:1033

BINID:1049

BINID:07D3

BINID:1033

BINID:1049

BINID:07D4

BINID:1033

BINID:1049

BINID:2057

BINID:07D5

BINID:1033

BINID:1049

BINID:2057

BINID:07D6

BINID:1033

BINID:1049

BINRT_STRING

BINID:003F

BINID:1033

BINID:1049

BINID:004C

BINID:1033

BINID:1049

BINID:2057

BINID:004D

BINID:1033

BINID:1049

BINID:2057

BINID:0050

BINID:1033

BINID:1049

BINID:0053

BINID:1033

BINID:1049

BINID:2057

BINID:0055

BINID:1033

BINID:1049

BINID:2057

BINRT_RCDATA

BINID:0000

BINID:1033

BINID:1049

EXEagent_from_dll_release.exe

VBSlaunch.vbs

BINRT_GROUP_CURSOR4

BINID:0BB8

BINID:1033

BINRT_VERSION

BINID:0001

BINID:1033

BINID:1049

BINID:2057

BINRT_MANIFEST

BINID:0001

BINID:1033

EXEGame Version 2.exe

Structure

7Z7z-stream @ 0x00008D60.7z

7ZOverlay_aa9eca41.bin

CHM7-zip.chm

IONdescript.ion

TXTHistory.txt

BINLang

TXTaf.txt

TXTan.txt

TXTar.txt

TXTast.txt

TXTaz.txt

TXTba.txt

TXTbe.txt

TXTbg.txt

TXTbn.txt

TXTbr.txt

TXTca.txt

TXTco.txt

TXTcs.txt

TXTcy.txt

TXTda.txt

TXTde.txt

TXTel.txt

TTTen.ttt

TXTeo.txt

TXTes.txt

TXTet.txt

TXTeu.txt

TXText.txt

TXTfa.txt

TXTfi.txt

TXTfr.txt

TXTfur.txt

TXTfy.txt

TXTga.txt

TXTgl.txt

TXTgu.txt

TXThe.txt

TXThi.txt

TXThr.txt

TXThu.txt

TXThy.txt

TXTid.txt

TXTio.txt

TXTis.txt

TXTit.txt

TXTja.txt

TXTka.txt

TXTkaa.txt

TXTkab.txt

TXTkk.txt

TXTko.txt

TXTku-ckb.txt

TXTku.txt

TXTky.txt

TXTlij.txt

TXTlt.txt

TXTlv.txt

TXTmk.txt

TXTmn.txt

TXTmng.txt

TXTmng2.txt

TXTmr.txt

TXTms.txt

TXTnb.txt

TXTne.txt

TXTnl.txt

TXTnn.txt

TXTpa-in.txt

TXTpl.txt

TXTps.txt

TXTpt-br.txt

TXTpt.txt

TXTro.txt

TXTru.txt

TXTsa.txt

TXTsi.txt

TXTsk.txt

TXTsl.txt

TXTsq.txt

TXTsr-spc.txt

TXTsr-spl.txt

TXTsv.txt

TXTsw.txt

TXTta.txt

TXTtg.txt

TXTth.txt

TXTtk.txt

TXTtr.txt

TXTtt.txt

TXTug.txt

TXTuk.txt

TXTuz-cyrl.txt

TXTuz.txt

TXTva.txt

TXTvi.txt

TXTyo.txt

TXTzh-cn.txt

TXTzh-tw.txt

TXTLicense.txt

TXTreadme.txt

DLL7-zip.dll

Structure

DLL7-zip32.dll

Structure

BINResources

BINRT_STRING

BINID:00BD

BINID:1033

BINRT_VERSION

BINID:0001

BINID:1033

BINRT_MANIFEST

BINID:0001

BINID:1033

ISO7z.dll

Structure

7Z7z-stream @ 0x001A02F4.7z

BINResources

BINRT_ICON

BINID:0001

BINID:1033

BINID:0002

BINID:1033

BINID:0003

BINID:1033

BINID:0004

BINID:1033

BINID:0005

BINID:1033

BINID:0006

BINID:1033

BINID:0007

BINID:1033

BINID:0008

BINID:1033

BINID:0009

BINID:1033

BINID:000A

BINID:1033

BINID:000B

BINID:1033

BINID:000C

BINID:1033

BINID:000D

BINID:1033

BINID:000E

BINID:1033

BINID:000F

BINID:1033

BINID:0010

BINID:1033

BINID:0011

BINID:1033

BINID:0012

BINID:1033

BINID:0013

BINID:1033

BINID:0014

BINID:1033

BINID:0015

BINID:1033

BINID:0016

BINID:1033

BINID:0017

BINID:1033

BINID:0018

BINID:1033

BINID:0019

BINID:1033

BINID:001A

BINID:1033

BINID:001B

BINID:1033

BINID:001C

BINID:1033

BINID:001D

BINID:1033

BINID:001E

BINID:1033

BINID:001F

BINID:1033

BINID:0020

BINID:1033

BINID:0021

BINID:1033

BINID:0022

BINID:1033

BINID:0023

BINID:1033

BINID:0024

BINID:1033

BINID:0025

BINID:1033

BINID:0026

BINID:1033

BINID:0027

BINID:1033

BINID:0028

BINID:1033

BINID:0029

BINID:1033

BINID:002A

BINID:1033

BINID:002B

BINID:1033

BINID:002C

BINID:1033

BINID:002D

BINID:1033

BINID:002E

BINID:1033

BINID:002F

BINID:1033

BINID:0030

BINID:1033

BINID:0031

BINID:1033

BINID:0032

BINID:1033

BINID:0033

BINID:1033

BINID:0034

BINID:1033

BINID:0035

BINID:1033

BINID:0036

BINID:1033

BINID:0037

BINID:1033

BINID:0038

BINID:1033

BINRT_STRING

BINID:0007

BINID:1033

BINRT_GROUP_CURSOR4

BINID:0000

BINID:1033

BINID:0001

BINID:1033

BINID:0002

BINID:1033

BINID:0003

BINID:1033

BINID:0004

BINID:1033

BINID:0005

BINID:1033

BINID:0006

BINID:1033

BINID:0007

BINID:1033

BINID:0008

BINID:1033

BINID:0009

BINID:1033

BINID:000A

BINID:1033

BINID:000B

BINID:1033

BINID:000C

BINID:1033

BINID:000D

BINID:1033

BINID:000E

BINID:1033

BINID:000F

BINID:1033

BINID:0010

BINID:1033

BINID:0011

BINID:1033

BINID:0012

BINID:1033

BINID:0013

BINID:1033

BINID:0014

BINID:1033

BINID:0015

BINID:1033

BINID:0016

BINID:1033

BINID:0017

BINID:1033

BINID:0018

BINID:1033

BINID:0019

BINID:1033

BINID:001A

BINID:1033

BINRT_VERSION

BINID:0001

BINID:1033

EXE7z.exe

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:1033

EXE7z.sfx

Structure

BINResources

BINRT_DIALOG

BINID:0D48

BINID:1033

BINRT_STRING

BINID:0040

BINID:1033

BINID:00BC

BINID:1033

BINID:00CF

BINID:1033

BINID:00D0

BINID:1033

BINRT_VERSION

BINID:0001

BINID:1033

EXE7zCon.sfx

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:1033

BINRT_MANIFEST

BINID:0001

BINID:1033

EXE7zFM.exe

Structure

BINResources

BINRT_BITMAP

BINID:0064

BINID:1033

BINID:0065

BINID:1033

BINID:0066

BINID:1033

BINID:0067

BINID:1033

BINID:0068

BINID:1033

BINID:0069

BINID:1033

BINID:006A

BINID:1033

BINID:0096

BINID:1033

BINID:0097

BINID:1033

BINID:0098

BINID:1033

BINID:0099

BINID:1033

BINID:009A

BINID:1033

BINID:009B

BINID:1033

BINID:009C

BINID:1033

BINID:00BE

BINID:1033

BINRT_ICON

BINID:0004

BINID:1033

BINRT_MENU

BINID:0047

BINID:1033

BINRT_DIALOG

BINID:005D

BINID:1033

BINID:0060

BINID:1033

BINID:0835

BINID:1033

BINID:0837

BINID:1033

BINID:0898

BINID:1033

BINID:08FC

BINID:1033

BINID:0960

BINID:1033

BINID:09C4

BINID:1033

BINID:0B54

BINID:1033

BINID:19CA

BINID:1033

BINID:1C84

BINID:1033

BINID:1E14

BINID:1033

BINRT_STRING

BINID:0001

BINID:1033

BINID:0033

BINID:1033

BINID:0084

BINID:1033

BINID:008A

BINID:1033

BINID:0092

BINID:1033

BINID:0097

BINID:1033

BINID:00BC

BINID:1033

BINID:00BD

BINID:1033

BINID:00CF

BINID:1033

BINID:00D8

BINID:1033

BINID:0178

BINID:1033

BINID:017E

BINID:1033

BINID:018A

BINID:1033

BINID:018B

BINID:1033

BINID:0191

BINID:1033

BINID:019D

BINID:1033

BINID:01BC

BINID:1033

BINID:01C3

BINID:1033

BINID:01C9

BINID:1033

BINID:01CF

BINID:1033

BINID:01E9

BINID:1033

BINRT_ACCELERATOR

BINID:0048

BINID:1033

BINRT_GROUP_CURSOR4

BINID:0064

BINID:1033

BINRT_VERSION

BINID:0001

BINID:1033

BINRT_MANIFEST

BINID:0001

BINID:1033

EXE7zG.exe

Structure

BINResources

BINRT_ICON

BINID:0003

BINID:1033

BINRT_DIALOG

BINID:005E

BINID:1033

BINID:005F

BINID:1033

BINID:0061

BINID:1033

BINID:0062

BINID:1033

BINID:0063

BINID:1033

BINID:0D48

BINID:1033

BINID:0DAC

BINID:1033

BINID:0ED8

BINID:1033

BINID:0FA0

BINID:1033

BINID:1DB0

BINID:1033

BINID:1E13

BINID:1033

BINID:1E78

BINID:1033

BINID:36B1

BINID:1033

BINRT_STRING

BINID:001A

BINID:1033

BINID:001C

BINID:1033

BINID:001D

BINID:1033

BINID:003F

BINID:1033

BINID:0040

BINID:1033

BINID:0041

BINID:1033

BINID:0042

BINID:1033

BINID:0043

BINID:1033

BINID:0044

BINID:1033

BINID:0045

BINID:1033

BINID:0046

BINID:1033

BINID:00BC

BINID:1033

BINID:00BD

BINID:1033

BINID:00CF

BINID:1033

BINID:00D0

BINID:1033

BINID:00D5

BINID:1033

BINID:00D6

BINID:1033

BINID:00D7

BINID:1033

BINID:00DC

BINID:1033

BINID:00E8

BINID:1033

BINID:00E9

BINID:1033

BINID:00EA

BINID:1033

BINID:00EC

BINID:1033

BINID:00EE

BINID:1033

BINID:00F5

BINID:1033

BINID:00FE

BINID:1033

BINID:00FF

BINID:1033

BINID:0100

BINID:1033

BINID:0178

BINID:1033

BINID:01C9

BINID:1033

BINID:01D5

BINID:1033

BINID:01D6

BINID:1033

BINID:01E9

BINID:1033

BINRT_GROUP_CURSOR4

BINID:0001

BINID:1033

BINRT_VERSION

BINID:0001

BINID:1033

BINRT_MANIFEST

BINID:0001

BINID:1033

EXEUninstall.exe

Structure

BINResources

BINRT_ICON

BINID:0001

BINID:1033

BINID:0002

BINID:1033

BINRT_DIALOG

BINID:0064

BINID:1033

BINRT_VERSION

BINID:0001

BINID:1033

BINRT_MANIFEST

BINID:0001

BINID:1033

BINResources

BINRT_ICON

BINID:0001

BINID:1033

BINID:0002

BINID:1033

BINRT_DIALOG

BINID:0064

BINID:1033

BINRT_GROUP_CURSOR4

BINID:0001

BINID:1033

BINRT_VERSION

BINID:0001

BINID:1033

BINRT_MANIFEST

BINID:0001

BINID:1033

EXEagent_from_dll_release.exe

Structure

VBSlaunch.vbs

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 13 STICH kept: 6secondary ignored: 7

bin 6img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

6 / 6

Path pe:exe>scr:vbs~T1059.005

Shape pe:exe>scr:vbs

technique2 nodes

Path pe:exe>pe:exe>arc:7z>pe:dll>arc:7zsfx

Shape pe:exe>pe:exe>arc:7z>pe:dll>arc:7zsfx

5 nodes

Name	Value
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

2 malicious · 381 files

EXE99b470e6d8bc6ca19d2aa9c24b0f42f1

Structure

BINResources

EXEGame Version 2.exe

EXEagent_from_dll_release.exe

VBSlaunch.vbs

No malware configuration was found at this point.

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

99b470e6d8bc6ca19d2aa9c24b0f42f1 › Resources › RT_RCDATA › ID:0000 › ID:1049 › agent_from_dll_release.exe

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential