Suspicious
Suspect

c0d3b0596d9acd2245c3306dd1862195

PE Executable
MD5: c0d3b0596d9acd2245c3306dd1862195
Size: 4.57 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 c0d3b0596d9acd2245c3306dd1862195
Sha1 f3297757c03b6c1fb52cc03f2ff924c18934ae94
Sha256 79eed86c0807697ca3e344aabac4823dd5275a932fcc8aa8f1fd12ef9e183fca
Sha384 671a72183f23b9d774c923152d8963c6b37df15e783628cf8892b2418274f0ffbd22fdc0a506203012bb66474d4d609b
Sha512 2aa53663c070753af6ca7d7fdaa7a39d4766b4f24e520b62a73eff05856fb87c3ba6972676bcc77d1c3fd5a4e7fc17badcc9f8d6bde017d28ef2a9bed3779cf0
SSDeep 49152:wxAvzX7m72uAeNyDFVAKQgQqZZYVfx5foD8j5Le+a7ocM2SAnXEgm3Md+iSPwlrE:wx+X66uAeNeAKiq7eZAI1cMryy5K
TLSH 1F2623E0A701C5A9DC9344BA443A9AA3B423B24D9F38548F2995BF0B7D733C65077C9B
PeID
MEW 11 SE 1.2Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
Overlay_4eecc22a.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.pdata
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:0065
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_4eecc22a.bin (4194304 bytes)
Overlay_4eecc22a.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.pdata
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:0065
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙