Suspicious
Suspect

PE Executable
MD5: c4fbb4345be16d0a29793091b7bea661
Size: 212.99 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 c4fbb4345be16d0a29793091b7bea661
Sha1 5ec9a61bf7f898a14d1daa8c7a9016bdca8c5817
Sha256 91f74109d45567a1efa84511ec9db55bef97c58aadd874321695b5ee3baf4bc0
Sha384 ed8d7d88af45d036312004d578fec04e9fa1b76b2c67d112ba711985d9bd9542f2aab4ea36febfc6d7ed5b496627ecb7
Sha512 4aefd75867d5086f8e7cb6fe446e9912d3d76cc73dbe55f4819783df1fd97239f5d09013605b8c4c4bd2185f2b082c1c2b59e6b45e8bc93e83a8e426a0b83d75
SSDeep 6144:LZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq5:dquCuygMQjd5vJIBP1
TLSH 1924122B1B2C9933D6550B3B8EE5EB3461BFF5516733D6D30B009A9DAD232803E26752
PeID
Stealth PE 1.01 -> BGCorp
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.PwM
.OwvyT
.MTxF
.XWRUxX
.data
.YCYo
.tKhtUt
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
RT_DIALOG
ID:004E
ID:1033
RT_STRING
ID:00A2
ID:1033
ID:00CA
ID:1033
ID:00F3
ID:1033
ID:010B
ID:1033
ID:0146
ID:1033
ID:01F5
ID:1033
ID:02E5
ID:1033
ID:02F4
ID:1033
RT_RCDATA
ID:00A0
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.PwM
.OwvyT
.MTxF
.XWRUxX
.data
.YCYo
.tKhtUt
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
RT_DIALOG
ID:004E
ID:1033
RT_STRING
ID:00A2
ID:1033
ID:00CA
ID:1033
ID:00F3
ID:1033
ID:010B
ID:1033
ID:0146
ID:1033
ID:01F5
ID:1033
ID:02E5
ID:1033
ID:02F4
ID:1033
RT_RCDATA
ID:00A0
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙