Suspicious
Suspect

a52436823f005aead126feafd59918e9

PE Executable
MD5: a52436823f005aead126feafd59918e9
Size: 11.17 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 a52436823f005aead126feafd59918e9
Sha1 3908f455cd1dfeacfd41e1ed55752e0c0bbf017b
Sha256 4b6420d807cce4e48478e82acfff482ca87ba4607ca29df1ffc0bf28e6c53a64
Sha384 166decab2d531407b8951fd550bdee4df2b1ae8aa8bf9372868c0bd9a2455e51bed4dd7bdf9e8668e537edab92167e75
Sha512 0778c3ea78f3d055d0cca9834f35667304333680912283bd50dc668cecf3aa4ccd83a697c962e381cb6769b51523d8d5e1a78dd051ac486633a754674c243d3a
SSDeep 196608:lmeO0Qjv4pk05dTlLjx4Vsjritw5j5/Z1s2Y32hQwpBw3usQjEqq0JlOM:WBjit57xQs3Goj5/7sz2dptn3f
TLSH 3DB618633F1A08E4E10B5F314036C7070B96E9A486F987A7BDD6AE97DDC65C44CA2ED0
PeID
Microsoft Visual C++ v6.0 DLLMicrosoft WAV Audio file
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rtData
.rsrc
.reloc
Resources
FORM
ID:3A9A
ID:1033
ID:3A9F
ID:1033
ID:3AA4
ID:1033
ID:3AA9
ID:1033
ID:3AAE
ID:1033
HOTKEY
ID:3A99
ID:1033
ID:3A9E
ID:1033
ID:3AA3
ID:1033
ID:3AA8
ID:1033
ID:3AAD
ID:1033
INI
ID:3A9C
ID:1033
ID:3AA1
ID:1033
ID:3AA6
ID:1033
ID:3AAB
ID:1033
LOCALE_DATA
ID:013D
ID:1033
PAGE
ID:3A9B
ID:1033
ID:3AA5
ID:1033
ID:3AAA
ID:1033
ID:3AAF
ID:1033
WAVE
ID:0FB0
ID:1033
ID:3A9D
ID:1033
ID:3AA2
ID:1033
ID:3AA7
ID:1033
ID:3AAC
ID:1033
ZONECULTCLI
ID:0FA0
ID:1033
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
RT_STRING
ID:0007
ID:1033
ID:0008
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rtData
.rsrc
.reloc
Resources
FORM
ID:3A9A
ID:1033
ID:3A9F
ID:1033
ID:3AA4
ID:1033
ID:3AA9
ID:1033
ID:3AAE
ID:1033
HOTKEY
ID:3A99
ID:1033
ID:3A9E
ID:1033
ID:3AA3
ID:1033
ID:3AA8
ID:1033
ID:3AAD
ID:1033
INI
ID:3A9C
ID:1033
ID:3AA1
ID:1033
ID:3AA6
ID:1033
ID:3AAB
ID:1033
LOCALE_DATA
ID:013D
ID:1033
PAGE
ID:3A9B
ID:1033
ID:3AA5
ID:1033
ID:3AAA
ID:1033
ID:3AAF
ID:1033
WAVE
ID:0FB0
ID:1033
ID:3A9D
ID:1033
ID:3AA2
ID:1033
ID:3AA7
ID:1033
ID:3AAC
ID:1033
ZONECULTCLI
ID:0FA0
ID:1033
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
RT_STRING
ID:0007
ID:1033
ID:0008
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙