Malicious
Malicious

c985d185dc9ff616f26b31d130592568

Share on LinkedIn
Print
PE Executable
MD5: c985d185dc9ff616f26b31d130592568
Size: 6.1 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Very low
MD5 c985d185dc9ff616f26b31d130592568
Sha1 2e58e1755ae0019a29c51ca4b838c6fb3763e13f
Sha256 bbc7f32f71813fa5a3489b07fcd7cca013f58d26de634c5321bdaf8b66a0a50e
Sha384 d6c97b96dfa2206189ba3fa068fe87b871667c3cd05c299897c95bf8ac29a8dd6d6e2ff95cbcff19530757a771da5b43
Sha512 05560cfe6d134c5773c9f854fc4eee796ae5a45502e45b9d99f4ff47f523dfed81486da5e794ca0defe32a8946ced1047980e78943b4a8658d9a6a8de06652f0
SSDeep 98304:53MpGZ1XuVJrNaIplof35J0GiYT7WUZfYp9svL8WVm1IWYeIuBrZQ7vtlW/dYsC9:tM1VJRHplIriYPhprVm1IZeIuBrZQ7vD
TLSH 4E56E12664E13919D8B751B391E018B7683907CFE057601F54B486DA3CB7BCBCF26B8A
PeID
Microsoft Visual C++ DLLMicrosoft Visual C++ v6.0UPolyX 0.3 -> delikon
c985d185dc9ff616f26b31d130592568
Malicious
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_ICON
ID:0002
ID:0
ID:0-preview.png
ID:0003
ID:0
ID:0-preview.png
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0-preview.png
ID:0006
ID:0
ID:0-preview.png
ID:0007
ID:0
ID:0-preview.png
ID:0008
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Malicious
runtime-lock.json
setup.json
packwiz-installer.jar
Malicious
META-INF
MANIFEST.MF
4koma.kotlin_module
LICENSES.md
com.android.tools
proguard
kotlin-reflect.pro
r8-from-1.6.0
kotlin-reflect.pro
r8-upto-1.6.0
kotlin-reflect.pro
compiler.common.jvm.kotlin_module
compiler.common.kotlin_module
descriptors.jvm.kotlin_module
descriptors.kotlin_module
descriptors.runtime.kotlin_module
deserialization.common.jvm.kotlin_module
deserialization.common.kotlin_module
deserialization.kotlin_module
kotlin-reflection.kotlin_module
kotlin-stdlib-common.kotlin_module
kotlin-stdlib-jdk7.kotlin_module
kotlin-stdlib-jdk8.kotlin_module
kotlin-stdlib.kotlin_module
metadata.jvm.kotlin_module
metadata.kotlin_module
okhttp.kotlin_module
okio.kotlin_module
packwiz-installer.kotlin_module
services
kotlin.reflect.jvm.internal.impl.builtins.BuiltInsLoader
kotlin.reflect.jvm.internal.impl.resolve.ExternalOverridabilityCondition
util.runtime.kotlin_module
versions
9
kotlin
reflect
jvm
internal
impl
serialization
deserialization
builtins
BuiltInsResourceLoader.class
module-info.class
cc
ekblad
toml
TomlMapper$delegate$1$1.class
TomlMapper$delegate$2$1.class
TomlMapper.class
TomlMapperKt$defaultConfig$$inlined$decoder$1.class
TomlMapperKt$defaultConfig$$inlined$decoder$10.class
TomlMapperKt$defaultConfig$$inlined$decoder$11.class
TomlMapperKt$defaultConfig$$inlined$decoder$12.class
TomlMapperKt$defaultConfig$$inlined$decoder$13.class
TomlMapperKt$defaultConfig$$inlined$decoder$14.class
TomlMapperKt$defaultConfig$$inlined$decoder$15.class
TomlMapperKt$defaultConfig$$inlined$decoder$16.class
TomlMapperKt$defaultConfig$$inlined$decoder$17.class
TomlMapperKt$defaultConfig$$inlined$decoder$18.class
TomlMapperKt$defaultConfig$$inlined$decoder$19.class
TomlMapperKt$defaultConfig$$inlined$decoder$2.class
TomlMapperKt$defaultConfig$$inlined$decoder$20.class
TomlMapperKt$defaultConfig$$inlined$decoder$21.class
TomlMapperKt$defaultConfig$$inlined$decoder$22.class
TomlMapperKt$defaultConfig$$inlined$decoder$23.class
TomlMapperKt$defaultConfig$$inlined$decoder$24.class
TomlMapperKt$defaultConfig$$inlined$decoder$25.class
TomlMapperKt$defaultConfig$$inlined$decoder$26.class
TomlMapperKt$defaultConfig$$inlined$decoder$27.class
TomlMapperKt$defaultConfig$$inlined$decoder$28.class
TomlMapperKt$defaultConfig$$inlined$decoder$29.class
TomlMapperKt$defaultConfig$$inlined$decoder$3.class
TomlMapperKt$defaultConfig$$inlined$decoder$30.class
TomlMapperKt$defaultConfig$$inlined$decoder$31.class
TomlMapperKt$defaultConfig$$inlined$decoder$32.class
TomlMapperKt$defaultConfig$$inlined$decoder$33.class
TomlMapperKt$defaultConfig$$inlined$decoder$34.class
TomlMapperKt$defaultConfig$$inlined$decoder$35.class
TomlMapperKt$defaultConfig$$inlined$decoder$36.class
TomlMapperKt$defaultConfig$$inlined$decoder$37.class
TomlMapperKt$defaultConfig$$inlined$decoder$38.class
TomlMapperKt$defaultConfig$$inlined$decoder$39.class
TomlMapperKt$defaultConfig$$inlined$decoder$4.class
TomlMapperKt$defaultConfig$$inlined$decoder$40.class
TomlMapperKt$defaultConfig$$inlined$decoder$41.class
TomlMapperKt$defaultConfig$$inlined$decoder$42.class
TomlMapperKt$defaultConfig$$inlined$decoder$43.class
TomlMapperKt$defaultConfig$$inlined$decoder$44.class
TomlMapperKt$defaultConfig$$inlined$decoder$45.class
TomlMapperKt$defaultConfig$$inlined$decoder$46.class
TomlMapperKt$defaultConfig$$inlined$decoder$47.class
TomlMapperKt$defaultConfig$$inlined$decoder$48.class
TomlMapperKt$defaultConfig$$inlined$decoder$49.class
TomlMapperKt$defaultConfig$$inlined$decoder$5.class
TomlMapperKt$defaultConfig$$inlined$decoder$50.class
TomlMapperKt$defaultConfig$$inlined$decoder$51.class
TomlMapperKt$defaultConfig$$inlined$decoder$52.class
TomlMapperKt$defaultConfig$$inlined$decoder$53.class
TomlMapperKt$defaultConfig$$inlined$decoder$54.class
TomlMapperKt$defaultConfig$$inlined$decoder$55.class
TomlMapperKt$defaultConfig$$inlined$decoder$6.class
TomlMapperKt$defaultConfig$$inlined$decoder$7.class
TomlMapperKt$defaultConfig$$inlined$decoder$8.class
TomlMapperKt$defaultConfig$$inlined$decoder$9.class
TomlMapperKt$defaultConfig$$inlined$encoder$1.class
TomlMapperKt$defaultConfig$$inlined$encoder$10.class
TomlMapperKt$defaultConfig$$inlined$encoder$11.class
TomlMapperKt$defaultConfig$$inlined$encoder$12.class
TomlMapperKt$defaultConfig$$inlined$encoder$13.class
TomlMapperKt$defaultConfig$$inlined$encoder$14.class
TomlMapperKt$defaultConfig$$inlined$encoder$15.class
TomlMapperKt$defaultConfig$$inlined$encoder$16.class
TomlMapperKt$defaultConfig$$inlined$encoder$17.class
TomlMapperKt$defaultConfig$$inlined$encoder$18.class
TomlMapperKt$defaultConfig$$inlined$encoder$19.class
TomlMapperKt$defaultConfig$$inlined$encoder$2.class
TomlMapperKt$defaultConfig$$inlined$encoder$20.class
TomlMapperKt$defaultConfig$$inlined$encoder$21.class
TomlMapperKt$defaultConfig$$inlined$encoder$22.class
TomlMapperKt$defaultConfig$$inlined$encoder$3.class
TomlMapperKt$defaultConfig$$inlined$encoder$4.class
TomlMapperKt$defaultConfig$$inlined$encoder$5.class
TomlMapperKt$defaultConfig$$inlined$encoder$6.class
TomlMapperKt$defaultConfig$$inlined$encoder$7.class
TomlMapperKt$defaultConfig$$inlined$encoder$8.class
TomlMapperKt$defaultConfig$$inlined$encoder$9.class
TomlMapperKt$defaultConfig$1.class
TomlMapperKt$defaultConfig$10.class
TomlMapperKt$defaultConfig$11.class
TomlMapperKt$defaultConfig$12.class
TomlMapperKt$defaultConfig$13.class
TomlMapperKt$defaultConfig$14.class
TomlMapperKt$defaultConfig$15.class
TomlMapperKt$defaultConfig$16.class
TomlMapperKt$defaultConfig$17.class
TomlMapperKt$defaultConfig$18.class
TomlMapperKt$defaultConfig$19.class
TomlMapperKt$defaultConfig$2.class
TomlMapperKt$defaultConfig$20.class
TomlMapperKt$defaultConfig$21.class
TomlMapperKt$defaultConfig$22.class
TomlMapperKt$defaultConfig$3.class
TomlMapperKt$defaultConfig$4.class
TomlMapperKt$defaultConfig$49$1$1.class
TomlMapperKt$defaultConfig$49.class
TomlMapperKt$defaultConfig$5.class
TomlMapperKt$defaultConfig$6.class
TomlMapperKt$defaultConfig$7.class
TomlMapperKt$defaultConfig$8.class
TomlMapperKt$defaultConfig$9.class
TomlMapperKt$defaultTomlMapper$2$1.class
TomlMapperKt$defaultTomlMapper$2.class
TomlMapperKt.class
TraversalKt.class
configuration
TomlMapperConfig.class
TomlMapperConfigurator$mapping$2$missingParameters$1.class
TomlMapperConfigurator.class
model
TomlException$AccessError.class
TomlException$DecodingError.class
TomlException$EncodingError.class
TomlException$ParseError.class
TomlException.class
TomlValue$Bool.class
TomlValue$Companion.class
TomlValue$Double.class
TomlValue$Integer.class
TomlValue$List.class
TomlValue$LocalDate.class
TomlValue$LocalDateTime.class
TomlValue$LocalTime.class
TomlValue$Map.class
TomlValue$OffsetDateTime.class
TomlValue$Primitive.class
TomlValue$String.class
TomlValue.class
parser
TomlLexer.class
TomlParser$Array_Context.class
TomlParser$Array_tableContext.class
TomlParser$Array_valuesContext.class
TomlParser$Bool_Context.class
TomlParser$CommentContext.class
TomlParser$Comment_or_nlContext.class
TomlParser$Date_timeContext.class
TomlParser$DocumentContext.class
TomlParser$Dotted_keyContext.class
TomlParser$ExpressionContext.class
TomlParser$Floating_pointContext.class
TomlParser$Inline_tableContext.class
TomlParser$Inline_table_keyvalsContext.class
TomlParser$Inline_table_keyvals_non_emptyContext.class
TomlParser$IntegerContext.class
TomlParser$KeyContext.class
TomlParser$Key_valueContext.class
TomlParser$Quoted_keyContext.class
TomlParser$Simple_keyContext.class
TomlParser$Standard_tableContext.class
TomlParser$StringContext.class
TomlParser$TableContext.class
TomlParser$Unquoted_keyContext.class
TomlParser$ValueContext.class
TomlParser.class
serialization
MutableTomlValue$InlineList.class
MutableTomlValue$InlineMap.class
MutableTomlValue$List.class
MutableTomlValue$Map.class
MutableTomlValue$Primitive.class
MutableTomlValue.class
TomlBuilder$Companion.class
TomlBuilder$Context$Companion.class
TomlBuilder$Context$DefaultImpls.class
TomlBuilder$Context.class
TomlBuilder$ContextImpl.class
TomlBuilder.class
TomlDeserializerKt.class
TomlErrorListener.class
TomlParserAdapterKt$convertEscapeCodes$1.class
TomlParserAdapterKt$throwOnBadChar$badChars$1.class
TomlParserAdapterKt.class
transcoding
TomlDecoder$Pass.class
TomlDecoder$decoderFor$1$1.class
TomlDecoder.class
TomlDecoderKt.class
TomlEncoder$Pass.class
TomlEncoder$encoderFor$1$1.class
TomlEncoder.class
TomlEncoderKt.class
util
KTypeUtilsKt.class
com
google
gson
ExclusionStrategy.class
FieldAttributes.class
FieldNamingPolicy$1.class
FieldNamingPolicy$2.class
FieldNamingPolicy$3.class
FieldNamingPolicy$4.class
FieldNamingPolicy$5.class
FieldNamingPolicy$6.class
FieldNamingPolicy$7.class
FieldNamingPolicy.class
FieldNamingStrategy.class
Gson$1.class
Gson$2.class
Gson$3.class
Gson$4.class
Gson$5.class
Gson$FutureTypeAdapter.class
Gson.class
GsonBuilder.class
InstanceCreator.class
JsonArray.class
JsonDeserializationContext.class
JsonDeserializer.class
JsonElement.class
JsonIOException.class
JsonNull.class
JsonObject.class
JsonParseException.class
JsonParser.class
JsonPrimitive.class
JsonSerializationContext.class
JsonSerializer.class
JsonSyntaxException.class
LongSerializationPolicy$1.class
LongSerializationPolicy$2.class
LongSerializationPolicy.class
ToNumberPolicy$1.class
ToNumberPolicy$2.class
ToNumberPolicy$3.class
ToNumberPolicy$4.class
ToNumberPolicy.class
ToNumberStrategy.class
TypeAdapter$1.class
TypeAdapter.class
TypeAdapterFactory.class
annotations
Expose.class
JsonAdapter.class
SerializedName.class
Since.class
Until.class
internal
$Gson$Preconditions.class
$Gson$Types$GenericArrayTypeImpl.class
$Gson$Types$ParameterizedTypeImpl.class
$Gson$Types$WildcardTypeImpl.class
$Gson$Types.class
ConstructorConst