Deep Malware Analysis of abff406810ad2584ad14c68092983e9c | md5: abff406810ad2584ad14c68092983e9c | Executable | PE (Portable Executable) | PE Memory-Mapped (Dump)

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	abff406810ad2584ad14c68092983e9c
Sha1	dabcf014369a7f5017192e2a538358889ee850f7
Sha256	4c0aad4c85da91d98dfd73d58f1d2cfb5bff74a8464115f8107751905f75ca03
Sha384	43b588ac100f741e0ad621a60a25cb3ebfdcf2da9c8d54450edf4130b21440bdbcfb91bfcbb26dbb06eab002d994deb9
Sha512	1a71708acb8382859bde4919229a8347a2a154767fafb1e1e31384d7b001ee49ad77fc61120e23c5be07a5c4f67a05486043fe00ee5e2696aaaa58e1c9bbbd51
SSDeep	49152:RnOMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnv:1OPoBhz1aRxcSUDk36SAEdhv
TLSH	6136339A71BC81F8D205297484AB8E03F2B27C6A25FA6A0FDF4049752D53F56F790B43

PeID

Microsoft Visual C++ 6.0Microsoft Visual C++ 6.0 DLLMicrosoft Visual C++ v6.0 DLLMicrosoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon

Name	Value
Info	PE Detect: PeReader FAIL, AsmResolver Mapped OK
Info	Overlay extracted: Overlay_693e9af8.bin (3 bytes)
Info	Remap: Mapped -> FileLayout (RAM only) as [Rebuild from dump]_d93802f4.exe

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.