Suspicious
Suspect

a8a54bbed77d7ec72cb0f8566e9b4837

PE Executable
|
MD5: a8a54bbed77d7ec72cb0f8566e9b4837
|
Size: 2.95 MB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
a8a54bbed77d7ec72cb0f8566e9b4837
Sha1
600034e34457f0fd7070ed26351f3fe66200dba7
Sha256
70210b70626f6136e71422b70bec9d784c9e08921d5841a97a64588670cd3a02
Sha384
b9480dad5520105bef5ab8eb15d015009d0e47953874edd2f6ff4f826e6298d24930837b778318b27f21052c0348bff5
Sha512
4d8df12ffa72f7a2ee0de28194d8f607c6918349ab82d74693d2bbe717324c18a4ee5da20348429de22518056b108722964c542537957ffe07744593a76cda96
SSDeep
49152:9YF6rIBOmZFDKV7Pji5shT60OLg90bp7kXyJWFOjAQkw9rYWPmU1sX:9YKL7PmeNURkqWFO8QFqamLX
TLSH
8BD5590B7CA04AFAD19AA2358D7E51A13778F8194B3123DB2E50BEB82F767D08D35744

PeID

HQR data file
Microsoft Visual C++ v6.0 DLL
Private EXE Protector V2.30-V2.3X -> SetiSoft Team
tElock 1.0 (private) -> tE!
tElock 1.0 (private) -> tE!
File Structure
[Authenticode]_9202054a.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0-preview.png
RT_DIALOG
ID:0066
ID:1033
ID:0067
ID:1033
ID:0069
ID:1033
ID:006A
ID:1033
ID:006B
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:0
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

Authenticode present at 0x2CC800 size 11864 bytes

a8a54bbed77d7ec72cb0f8566e9b4837 (2.95 MB)
File Structure
[Authenticode]_9202054a.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0-preview.png
RT_DIALOG
ID:0066
ID:1033
ID:0067
ID:1033
ID:0069
ID:1033
ID:006A
ID:1033
ID:006B
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:0
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙