Suspicious
Suspect

b2d8a7fa418143a4542b28c53e86a080

PE Executable
MD5: b2d8a7fa418143a4542b28c53e86a080
Size: 12.41 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 b2d8a7fa418143a4542b28c53e86a080
Sha1 d60a47075c410509c0bc77eab2ea58dc759487e6
Sha256 b106a8b8ffa1c67e0e8f21a2015d0f0935e16e9e710c95b1bef3f924d532bd76
Sha384 ea977a993ba2ad8b910fb55143120180b8a7c0c24e5c0b8a46c3d4f991b5218b8754b1826462906e00e4c9a7a58a5a3e
Sha512 042229efddbbf5225c4b0e30aaf3b0357a0cdb01e31cb663be8120b473afc1bd9164c6f43bb8364ceea976d8314497b620c18ba13284f6f944e68428d31971e7
SSDeep 49152:S01Zdh9X2Qlb2jVPz8Jw7lzDY8ClWug9WDTYJcfgAwZvRJbbz:TPCYtG
TLSH CDC60947728800ECC98BD77544B15E7A12F23DEE5122BB4A0F997EA02F177956F68F08
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
[Authenticode]_9edba683.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0xBD4600 size 8096 bytes
[Authenticode]_9edba683.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙