Suspicious
Suspect

PE Executable
MD5: abcf15a772bc392cc064601808708297
Size: 212.99 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 abcf15a772bc392cc064601808708297
Sha1 2002477d3dc1d0efc76d428f1a54285c16847a12
Sha256 995cea164ec18f08af5a413ba85489404ecde27d32b95d7cb59a584b57e3fd28
Sha384 08a1046f429ce68da2e95894b3ca8e5040434ae670bae67385b0b35ecc02af4344336df20387e64104e2401452acedb1
Sha512 7cdc503b08afc159a73980280595684ec4748e80d5445b9742743e60d52967b6f806b90f5a8ef034b3688e404eee12b6f102f5c2eae364734d48b3a15cad5d1b
SSDeep 6144:VZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq5:nquCuygMQjd5vJIBP1
TLSH 8B24122B1B2C9933D6550B3B8EE5EB3461BFF5516733D6D30B009A9DAD232803E26752
PeID
Stealth PE 1.01 -> BGCorp
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.PwM
.OwvyT
.MTxF
.XWRUxX
.data
.YCYo
.tKhtUt
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
RT_DIALOG
ID:004E
ID:1033
RT_STRING
ID:00A2
ID:1033
ID:00CA
ID:1033
ID:00F3
ID:1033
ID:010B
ID:1033
ID:0146
ID:1033
ID:01F5
ID:1033
ID:02E5
ID:1033
ID:02F4
ID:1033
RT_RCDATA
ID:00A0
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.PwM
.OwvyT
.MTxF
.XWRUxX
.data
.YCYo
.tKhtUt
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
RT_DIALOG
ID:004E
ID:1033
RT_STRING
ID:00A2
ID:1033
ID:00CA
ID:1033
ID:00F3
ID:1033
ID:010B
ID:1033
ID:0146
ID:1033
ID:01F5
ID:1033
ID:02E5
ID:1033
ID:02F4
ID:1033
RT_RCDATA
ID:00A0
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙