Suspicious
Suspect

bb6ffcd8f5c888ddf779505789c631e3

Share on LinkedIn
Print
PE Executable
MD5: bb6ffcd8f5c888ddf779505789c631e3
Size: 14.33 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 bb6ffcd8f5c888ddf779505789c631e3
Sha1 6f5a51cc4a22bc9658113549ed30854e6984b0a6
Sha256 dfa93b74300df321b1be16d78ec9ca746716f435a4c7ef830ec728620fafad22
Sha384 3dc6a8c4f657a9e9f29bd3b2792b128c9c679f858f5bec3139fc913b125e56d9cc51950eb8e382e30ac7207fd0235437
Sha512 ec4c62c29efcf916b79df15a12f7ff32205e3a2ea68fd028171d7e27cd994167c5e246507d99fc517cb36a390c599e7476dca6af1c06527b040486d3fe33a566
SSDeep 393216:qhBItyRccQXw7Bk7a/VCqXMCHWUjX2cuI3/PGTAI:qhBIj+k2/VCqXMb8XLH/O7
TLSH 61E6334826E103FBE727403DEEB35991E47674752B3AC99B475C8BE62D1B1804E3E263
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
bb6ffcd8f5c888ddf779505789c631e3
Overlay_45814806.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0-preview.png
ID:0003
ID:0
ID:0-preview.png
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_45814806.bin (14028519 bytes)
Info
PDB Path: t$mn
An error has occurred. This application may no longer respond until reloaded. Reload 🗙