Suspicious
Suspect

a91b6feff52f7e1da4291d698d6403fb

PE Executable
MD5: a91b6feff52f7e1da4291d698d6403fb
Size: 1.01 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 a91b6feff52f7e1da4291d698d6403fb
Sha1 ada0b43931937550246fc6f80645f19b6083a2e5
Sha256 3833a87acf0e19acb201cd5082f9580903eaf950f13545025542e2f5116062ae
Sha384 36bf6e37276591f2c808c51ac06314dfd6db593c6ddde49d2888101775f81e2f493111e374ea0d73d3af3545057a8108
Sha512 5c3f636041cc6681168ffaad0108e60d5d0e2473b14f94a6be2191638295ab00836437c0ac30a2636b127d200cd7240b4750ebbc750ea124b9b403c89c641ba7
SSDeep 12288:Lrj7qibKKM+IoO6WaZImOeDtTmjjMgan6NxiSEImN+GQsTy+cfYIdNK/9:fjGTPFaZjO8tW1QwE5LZu+cfYII9
TLSH 3B259CCB6B810FB8F116D13E4E711221A9B0B0794ADC66ABC1DCC53A79EE5807AF4D4D
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.tls
_RDATA
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:1033
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: snufelium.pdb
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.tls
_RDATA
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:1033
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙