abff406810ad2584ad14c68092983e9c

PE Executable

MD5: abff406810ad2584ad14c68092983e9c

Size: 5.27 MB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	abff406810ad2584ad14c68092983e9c
Sha1	dabcf014369a7f5017192e2a538358889ee850f7
Sha256	4c0aad4c85da91d98dfd73d58f1d2cfb5bff74a8464115f8107751905f75ca03
Sha384	43b588ac100f741e0ad621a60a25cb3ebfdcf2da9c8d54450edf4130b21440bdbcfb91bfcbb26dbb06eab002d994deb9
Sha512	1a71708acb8382859bde4919229a8347a2a154767fafb1e1e31384d7b001ee49ad77fc61120e23c5be07a5c4f67a05486043fe00ee5e2696aaaa58e1c9bbbd51
SSDeep	49152:RnOMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnv:1OPoBhz1aRxcSUDk36SAEdhv
TLSH	6136339A71BC81F8D205297484AB8E03F2B27C6A25FA6A0FDF4049752D53F56F790B43

PeID

Microsoft Visual C++ 6.0Microsoft Visual C++ 6.0 DLLMicrosoft Visual C++ v6.0 DLLMicrosoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon

Name	Value
Info	PE Detect: PeReader FAIL, AsmResolver Mapped OK
Info	Overlay extracted: Overlay_693e9af8.bin (3 bytes)
Info	Remap: Mapped -> FileLayout (RAM only) as [Rebuild from dump]_d93802f4.exe

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

No malware configuration was found at this point.

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

abff406810ad2584ad14c68092983e9c

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

You must be signed in to view YARA rules.