Suspicious
Suspect

abfd9344b9af341998d9b8a3819816b7

PE Executable
MD5: abfd9344b9af341998d9b8a3819816b7
Size: 14.3 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 abfd9344b9af341998d9b8a3819816b7
Sha1 c0019ecbef1c4c0bfed78fc63abb5ee090bebb9b
Sha256 e402ab774841035c2f4e07a4f11bae65ed89cc9632b77f4ee9e5917c5a541f43
Sha384 b7a4b625f5c2b07bf90d15c8d2b5f6bf9cac138b23d65fcc790f8aed6c7fce85c76c681f7561a0753d9893f623665d2c
Sha512 1ddeddb078f5da0c1d87a6814e10111e502505224d8eb3e240460d55a7ee90667c494f4f33904e75ce870bcb84698535086aaa7ff12b2e1b005240878271be2a
SSDeep 393216:0txz0F6Jg6QfxOvxQqGT9XMCHWUjX7cuI3/PGTAI:ixzb+f8vxnGT9XMb8X4H/O7
TLSH F0E6330C56E426E9D5F38078EEE1D5C29551B4A21B72CADB4F78C6A8AF473A00C3F617
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Overlay_0138d527.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0-preview.png
ID:0003
ID:0
ID:0-preview.png
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_0138d527.bin (14004817 bytes)
Info
PDB Path: t$mn
Overlay_0138d527.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0-preview.png
ID:0003
ID:0
ID:0-preview.png
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙