Suspicious
Suspect

cfec77eb0496a5d28a14eb55ea14def5

Share on LinkedIn
Print
PE Executable
MD5: cfec77eb0496a5d28a14eb55ea14def5
Size: 8.41 MB
application/x-dosexec
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
cfec77eb0496a5d28a14eb55ea14def5
Sha1
9ecdff2d8c34208c3a1a11d5d8a3fb4b9889b343
Sha256
60b17488cbbda7313aa68d2eacfacde48dcad9e871efb8a771e71a49be20ba7e
Sha384
9e134f665073a9fd8d992650e603d6927e1fb9d5b8d78f6cda6c546081fdbd02b1e8d3a0ea7d615f61d6de74daa78f5f
Sha512
d64f60e8c9abaec4815329af9b72f9de93030d6105c9c8fa6eea62aed910dc46b1adf32f4dbd3180d4049c15f7f859b3a87922638e708cdc186bc2c13765fe46
SSDeep
49152:nq1zhE4HXMZWF7ApC/0B5WvuwUAOdL6UhW29s8K:nabVOdUJ
TLSH
0886AF03E9541CBAE717D2B9A00E6067AF51B8A43B7502E7297CA3A55FF37D04878B0D

PeID

HQR data file
Microsoft Visual C++ v6.0 DLL
Private EXE Protector V2.30-V2.3X -> SetiSoft Team
File Structure
cfec77eb0496a5d28a14eb55ea14def5
[Authenticode]_1ee57c21.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.eh_fram
.pdata
.xdata
.bss
.edata
.idata
.tls
.reloc
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0-preview.png
ID:0003
ID:0
ID:0-preview.png
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0-preview.png
ID:0006
ID:0
ID:0-preview.png
RT_STRING
ID:003F
ID:1046
ID:0045
ID:1046
ID:0046
ID:1046
ID:007E
ID:1046
ID:00BC
ID:1046
ID:00FB
ID:1046
ID:0139
ID:1046
ID:013A
ID:1046
ID:0178
ID:1046
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1046
RT_MANIFEST
ID:0001
ID:1046
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

Authenticode present at 0x800E00 size 15512 bytes
cfec77eb0496a5d28a14eb55ea14def5 (8.41 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙