Suspicious
Suspect

ae97af546c92c831e841a4860dba2d77

PE Executable
MD5: ae97af546c92c831e841a4860dba2d77
Size: 2.34 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 ae97af546c92c831e841a4860dba2d77
Sha1 a9b5b22aa3568833c0d2d1b0c5aadea578ecb52a
Sha256 7cbdd4302fae005f127150bae593ec7f00a00b67579a74417a0d05c63429bf4e
Sha384 cc931e5a03bad8542cd7ac3b21b8393c297b047db4ceb5c67ba1f6d6b710eace1dfce2ea7b5291626ef020076588fa08
Sha512 d081bc00cf1bd5728d7cc4b9718e7ec7401fd068f33a60e2b0cd24337d136bab89e29396705104b32fdfcd92e886918129acd51126976f38523ca48abd3db4d3
SSDeep 24576:nH6IKnwT2U4I0+g8T/mmL/SMxQKpUwY3HgdzZtkJBele5r9DY70fNKb:nHtiwT4Ilg8Tp2hwkQKK
TLSH FCB54B077C9148E9C4AA933189B652A27B70FC494F3263D72E90BB783E727E09D76744
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
[Authenticode]_4661d698.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
ID:0007
ID:0
ID:0008
ID:0
ID:0009
ID:0
ID:000A
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0000
ID:0
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x21F600 size 2400 bytes
[Authenticode]_4661d698.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
ID:0007
ID:0
ID:0008
ID:0
ID:0009
ID:0
ID:000A
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0000
ID:0
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙