Suspicious
Suspect

b20273e209c0fbda3fd8601c7267e1ed

PE Executable
MD5: b20273e209c0fbda3fd8601c7267e1ed
Size: 27.07 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 b20273e209c0fbda3fd8601c7267e1ed
Sha1 3915098c5aff6e4b55ef72e94538228142beb250
Sha256 75efcdc68bb7b298f2d3cac31cde47f80b8d98dbff34349d8c494e37293940b2
Sha384 b8cfb55dc05eb6cd1bb60365dd68ac12efa8dcdfcf6be4e430ea89b08e97b76b370fabe645b0368dbdb51c8cd4bdd6a2
Sha512 1dcf97ea0af75b6abbe67fc20e320baf014429b58e3f7890baf913bf97471fbd28612d59512885e073fe4754d4a27a1be9117f3b1a8fbfddc569257ee8c1b8fb
SSDeep 393216:bSX9va8M9rD/OUOrioVpXvr1ya7lBmJR23J:0Za8M9rbOriovJc0J
TLSH 8257AF51B70B05F6FB434C3645F9AB2F7B39E2DC8974C55AE428243ABAA2C1F45DC290
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamUPolyX 0.3 -> delikon
[Authenticode]_ffe98796.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.tls
.rsrc
.reloc
Resources
RT_ICON
ID:0000
ID:1033
Overlay_51b5a521.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.rsrc
.reloc
4
19
31
45
57
70
81
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

6 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 4img 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x19D0A00 size 1712 bytes
[Authenticode]_ffe98796.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.tls
.rsrc
.reloc
Resources
RT_ICON
ID:0000
ID:1033
Overlay_51b5a521.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.rsrc
.reloc
4
19
31
45
57
70
81
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙