Suspicious
Suspect

cf4866e9f6c60a4b253de4bb85f4da90

PE Executable
MD5: cf4866e9f6c60a4b253de4bb85f4da90
Size: 3.63 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 cf4866e9f6c60a4b253de4bb85f4da90
Sha1 3ec44d141f4d08ada015759eb2c5c79d76b53c54
Sha256 2fdcac512cef51c5b0d8a4fb23c278b973d20978aab5d463abbe131dd04879a0
Sha384 541477c7b81e77747a9d9f8e45f670c28b219434a96ab4efa0058fa413aa5a90ecb1052ccc94baa9fa8f5d2507cfdd61
Sha512 bbabb0e2bee4e5f6b34dd8817db2752a61f56122ea554491aa71c1594052c754a6f3103aaa9525264411add1ff84550e7ab8ffa81f3b3c8b557dc22a203858fe
SSDeep 98304:4L5oAypfKSn1Ue9UFjJeDYy3J79xqSxivJ07O6SPnL+nchdIOO7CUer/kEII:4R2NNI
TLSH 61F58C17ACA148FAD49AA331887292467774BC091B3573E72E90BB783F727D09E35B14
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
[Authenticode]_acf09d0e.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x376800 size 2400 bytes
[Authenticode]_acf09d0e.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙