Suspicious
Suspect

bd19447a6cae8561f03e7961f5a5bfa7

PE Executable
MD5: bd19447a6cae8561f03e7961f5a5bfa7
Size: 1.1 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 bd19447a6cae8561f03e7961f5a5bfa7
Sha1 c4ab3ff2fa979a5a3970bb0d88865ba38ec97b6e
Sha256 b0870f37b0968f0b10e698e2bb6815323ae8d5e88f67a753879974fccb28f58b
Sha384 88773021e224024b7930d16d5bd5289e187f7521949c742a81079cfc91e6fe018aa78fb96ccc9d7205443783cee1721a
Sha512 d1c30bdd575bcc64cfcd0b3b1acb82ff34c4b0f152f985e77cd2ee616446dd321aab4fbb5fb2af9d5beb3b25ecb883deccf1cd15abc4a0a7320edc84c4843667
SSDeep 12288:NiqPh5UC6gDBeh912wNe/5UHOqmP0NV1cKH+nFyknbfnie3TEUucdf4h6i7mG0M1:Aq/KX2vRUHTmPNFykTndTxnf4hXA
TLSH 5435DF4DB69D4CECC156897C56F14D03AA6338D6076366FB52946FE93E322F38A3B600
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.tls
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:1033
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: sciflu.pdb
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.tls
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:1033
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙