Suspicious
Suspect

cb7367db6eff56322187b06f5f86a56f

PE Executable
|
MD5: cb7367db6eff56322187b06f5f86a56f
|
Size: 3.45 MB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
cb7367db6eff56322187b06f5f86a56f
Sha1
3bcb65a139b14ec0c47230e485191fc57e5fd781
Sha256
fc1ef6b3e54b674a094befeac22c4ae6b4e1d45b737346d05e36a56682aa0a5a
Sha384
14e880e6fb02ace4bba0040b7d6476b5f869c557846850f4e3fa08f0a3336c7692c5a8e22d883948442682492c8d0155
Sha512
8b5826a0cf26a1cff799e54282f61b168ef6a8c98e76281a79954bee50c6f691d55a76cf9d53d1d9d6a008c7b9dffdc87641bdc9cf34a3c0ae04e76bc68f63e4
SSDeep
49152:RGpXFEXTXJ8XscNXjFnTu/8TDTk1UV8pCzwMIxEknqN4/v4p7:RTahIsd
TLSH
44F57B572D918DB9F4A6A234C8F26142BB74BC080B72A7D37F107AB92F72BC04571769

PeID

HQR data file
Microsoft Visual C++ v6.0 DLL
Private EXE Protector V2.30-V2.3X -> SetiSoft Team
tElock 1.0 (private) -> tE!
tElock 1.0 (private) -> tE!
File Structure
[Authenticode]_ece299a1.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
RT_MESSAGETABLE
ID:0001
ID:1033
RT_GROUP_CURSOR4
ID:0000
ID:0
ID:0065
ID:0
RT_VERSION
ID:0001
ID:1033
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

Authenticode present at 0x347400 size 10360 bytes

cb7367db6eff56322187b06f5f86a56f (3.45 MB)
File Structure
[Authenticode]_ece299a1.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
RT_MESSAGETABLE
ID:0001
ID:1033
RT_GROUP_CURSOR4
ID:0000
ID:0
ID:0065
ID:0
RT_VERSION
ID:0001
ID:1033
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙