Suspicious
Suspect

cb6b481eacc941898f73ac1c96111579

Share on LinkedIn
Print
PE Executable
MD5: cb6b481eacc941898f73ac1c96111579
Size: 2.64 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 cb6b481eacc941898f73ac1c96111579
Sha1 3bf9afbb19aa41d7d7bb4ceff3b20895e4240d57
Sha256 6a0dbbafcc53b79c1deadba56dc0f6f653c1e54975b1aa1e7ed48f88d3f2ac05
Sha384 3ab2f57f6e411011d567a9a065f4903c10bcb6d471db418c6a3a178006afb9a2fa8e8c18a803751455c675b0dd1817ba
Sha512 d2776e0bb4c53838555177c4f11c4c6b6618f08660b080a34ecd602d6169fb5225614267cf5cd9034f857e26007fef36cb1e8cd3a5a40d43cfabeceb5b7b884b
SSDeep 24576:fKyBpoEhebldB+CmEsKtB7N2Rv5vrTexpw69GxGIt2ClMvAoBele5I92GKOqcsJP:fKy/LhMlH+CxJvgF69IGIwCl/t9P4dnj
TLSH 9AC54907FCD149EAC09EA23289B691927B75BC481B3223D72E90B7782FB27D05D35B54
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
[Authenticode]_df32c149.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x283000 size 2416 bytes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙