Suspicious
Suspect

a4b2d22dab4b4e6f1506f5c0e09bdb72

PE Executable
MD5: a4b2d22dab4b4e6f1506f5c0e09bdb72
Size: 4.3 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 a4b2d22dab4b4e6f1506f5c0e09bdb72
Sha1 37308522e68b9fcd01b69e91bc0cc148d15db5c8
Sha256 d5d9e754f2bc9e9d8c91c0a15cc99639ad45547a7e233e5b15d5376d5061bbaa
Sha384 57a37f72d7887998ec52e671e7fc0b37f6b10c7c24fe380d769363f46a189482920f5331365ca8e29aaad082188bc01d
Sha512 6c97b7e4949b0693565fc3a3bd26acc9a90da3cc2a0dfe899ee646eddc92784d5f4b06e2acd5eae13627b73c234bac87aa4daecf4ae9ab65f39296a6d7736e07
SSDeep 98304:St+wahoXyp30UusJTWu6T+Ulln1OFCjdqlHo:o+wLBsRsZdZjdqlHo
TLSH 7A16338FECE6E1B4D83B43B4FE5207DC8527C75ECF1FD09AA469429E44AF00B5695282
PeID
Microsoft Visual C++ v6.0 DLLRPolyCryptor V1.4.2 -> Vaskax64 Themida / Winlicense v3.0.x.0 PACKED sign ASL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.exports
.imports
.tls
.rsrc
.themida
.boot
.reloc
Resources
RT_MANIFEST
ID:0002
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.exports
.imports
.tls
.rsrc
.themida
.boot
.reloc
Resources
RT_MANIFEST
ID:0002
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙