Suspicious
Suspect

c20a54cc45596e10f5eaf83a388128fe

PE Executable
MD5: c20a54cc45596e10f5eaf83a388128fe
Size: 5.75 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 c20a54cc45596e10f5eaf83a388128fe
Sha1 7fb8478bfa214c20a0d4ed26b293501d39c475bc
Sha256 04bc0dbf904d347bfa0b064bb436650fad0583b550dbd9450c8d00f4cb5a3b1b
Sha384 1248ad8463e69c202d9143a12c8c9d7872e9bffb38e28585cad9f42050e65a037ed352dd0de6cb0a2b17f34db26f85f4
Sha512 c7295e51fc4e843bce17fd663c43bb96d97caca28ccc403df6d162e7a1717be3738ed39c656b29e7b9dd2caec9becaaa916220ca8e57fb92df8d7043ecb59740
SSDeep 49152:VheA6Fk7Z0q9med65MbllMmeDDH65YWOl+Sef6vci39Om:a5kR065YWOl+Sef6EgOm
TLSH 5546E7F720D692ACC40AC93B8353EF6A895F71360B36D4E3B198D2525D16DC43A7AE1C
PeID
Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12
[Authenticode]_acf0bdd7.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.bss
.idata
.didata
.edata
.tls
.rdata
.reloc
.pdata
.rsrc
Resources
RT_STRING
ID:0FF5
ID:0
ID:0FF6
ID:0
ID:0FF7
ID:0
ID:0FF8
ID:0
ID:0FF9
ID:0
ID:0FFA
ID:0
ID:0FFB
ID:0
ID:0FFC
ID:0
ID:0FFD
ID:0
ID:0FFE
ID:0
ID:0FFF
ID:0
ID:1000
ID:0
RT_RCDATA
ID:0000
ID:0
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x579C00 size 10344 bytes
[Authenticode]_acf0bdd7.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.bss
.idata
.didata
.edata
.tls
.rdata
.reloc
.pdata
.rsrc
Resources
RT_STRING
ID:0FF5
ID:0
ID:0FF6
ID:0
ID:0FF7
ID:0
ID:0FF8
ID:0
ID:0FF9
ID:0
ID:0FFA
ID:0
ID:0FFB
ID:0
ID:0FFC
ID:0
ID:0FFD
ID:0
ID:0FFE
ID:0
ID:0FFF
ID:0
ID:1000
ID:0
RT_RCDATA
ID:0000
ID:0
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙