Suspicious
Suspect

cb6b481eacc941898f73ac1c96111579

PE Executable
MD5: cb6b481eacc941898f73ac1c96111579
Size: 2.64 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 cb6b481eacc941898f73ac1c96111579
Sha1 3bf9afbb19aa41d7d7bb4ceff3b20895e4240d57
Sha256 6a0dbbafcc53b79c1deadba56dc0f6f653c1e54975b1aa1e7ed48f88d3f2ac05
Sha384 3ab2f57f6e411011d567a9a065f4903c10bcb6d471db418c6a3a178006afb9a2fa8e8c18a803751455c675b0dd1817ba
Sha512 d2776e0bb4c53838555177c4f11c4c6b6618f08660b080a34ecd602d6169fb5225614267cf5cd9034f857e26007fef36cb1e8cd3a5a40d43cfabeceb5b7b884b
SSDeep 24576:fKyBpoEhebldB+CmEsKtB7N2Rv5vrTexpw69GxGIt2ClMvAoBele5I92GKOqcsJP:fKy/LhMlH+CxJvgF69IGIwCl/t9P4dnj
TLSH 9AC54907FCD149EAC09EA23289B691927B75BC481B3223D72E90B7782FB27D05D35B54
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
[Authenticode]_df32c149.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x283000 size 2416 bytes
[Authenticode]_df32c149.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙