Suspicious
Suspect

c02941509f498b428ecb4bb31852fc81

PE Executable
MD5: c02941509f498b428ecb4bb31852fc81
Size: 15.96 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 c02941509f498b428ecb4bb31852fc81
Sha1 5dc7a82e24ebbf4359fba505bd54efa25334a1e4
Sha256 c0de153fc5580c1398c6a4ab9ed0cbb2c005fc13c8b0072b38166a3dedf9ce65
Sha384 24dd98db09dc005cba17243b02b9ccee52c94cb097523bcf150be18aa3d4f0a72222341101c15171254e63f3678edb08
Sha512 020c597dc40bfc4a4972ad3ddc4bbfc6d0136a42f358b3794fd2ccad1a1a78dba11e91651c6e9dc43891ec3bc59566f07c747140ec6f7c5d75ba692daeeca2fc
SSDeep 393216:YwW8aLze0ZuCq6mdUSCmLwqFaxJoy14+WwoTAtn:tW8afe0gCq9qJ0VFaxmE4HwoTAtn
TLSH 58F633C8B39408EAE8EBA63DE691581A53F635520FA5C1D717F806901DB72E8FE74331
Overlay_c0b53d21.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_c0b53d21.bin (15588413 bytes)
Info
PDB Path: t$mn
Overlay_c0b53d21.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙