Suspicious
Suspect

bab77ee208c4b92ba93b77c4504709be

PE Executable
MD5: bab77ee208c4b92ba93b77c4504709be
Size: 4.83 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 bab77ee208c4b92ba93b77c4504709be
Sha1 f5e524f6fd1a2e1d4c4ae1e9d29d86ca17f3f2aa
Sha256 cb8f0302a19874e4ceaa48c00e7cd3c1d0a22f83fb313423c9300682a9f0bcfd
Sha384 75de2dc61ce8e7bf4a240620d32412a7cb104c0267cefb55640ff5a548e23ba1fa9b9a84c1c479ac58473af97f682bfa
Sha512 c8619ff9d1375051c850121f72ed57c7b4c189f7ebe73b60393da3851a6ed506bd3a810f4c87f9bacd1ab5972e9902f37e3bb9afe85924e505a6306d55a4433b
SSDeep 49152:dw1ALhGCX6V9sZbO0x7ivZPnBin4xbJgNCCF1Imxw7sV37lcJ:d3lZbavdkAgNCgbxUa
TLSH 03266C47BC9268B6C095A33189B66356BBF1BC081B3523D32E60BA782F773D05D72B54
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
[Authenticode]_eda49a0e.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x44F800 size 2424 bytes
[Authenticode]_eda49a0e.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙