Suspicious
Suspect

c4a5bc28c729c83295e3e321b85e3478

PE Executable
|
MD5: c4a5bc28c729c83295e3e321b85e3478
|
Size: 6.68 MB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
c4a5bc28c729c83295e3e321b85e3478
Sha1
4b253d5f2e5a0e4fdfc9e55f80d84492be9c6bdd
Sha256
6e3647ad54e590d3a3b791a25739b73d4e155984c9d12cce6cb4d19e6d47b4fc
Sha384
b4b6046a20e9c242d213fece18c8f8b6df2a85e29370c48993be1f6b2d6b1cbf6c4154dc96657b1f565ad607fd1dc563
Sha512
96deb66af48d22f55fb2676ab18750578b698bc99d12a48019ab61d9c378b14dcc915a03a6e30e3b8595ebd8a3d38960aaac31fb74204485e9089e15964f18cf
SSDeep
49152:sIGd3HPGwjNSFDAcG6E/pmWDNM7eOwY9HGwFg3+LfGMqoC9jef9jqrBfKiK9Kvzo:sfejGNROz9mwXZN+bziEg
TLSH
2E665B03EC9145E9C0B9E2318A779262BB71BC485B3123D32B90F7296F76BD0AE75750

PeID

HQR data file
Microsoft Visual C++ v6.0 DLL
Private EXE Protector V2.30-V2.3X -> SetiSoft Team
tElock 1.0 (private) -> tE!
tElock 1.0 (private) -> tE!
File Structure
c4a5bc28c729c83295e3e321b85e3478
[Authenticode]_a1dcbddc.p7b
Overlay_a7a54b3d.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
RT_GROUP_CURSOR4
ID:0000
ID:0
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

Authenticode present at 0x655400 size 13120 bytes
Info

Overlay extracted: Overlay_a7a54b3d.bin (13120 bytes)
c4a5bc28c729c83295e3e321b85e3478 (6.68 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙