Suspicious
Suspect

d42f90969a25da0e012a6d98492a7100

PE Executable
MD5: d42f90969a25da0e012a6d98492a7100
Size: 1.2 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 d42f90969a25da0e012a6d98492a7100
Sha1 0b811447fef9b6b123219027bfca6b331927b8b9
Sha256 581458c342c59798f1b57aa7724a1dabdff74ee0fe03a641a03dbecef2b6ea3d
Sha384 d891bca8f233cc118be640c651c1c4aa2477ccc52c2e4fb8b8a71b35b59cb757403786dedc92bf06cc9f94aecc37fefe
Sha512 5ec514c4681c2ffc5a1d61368b14b8fadfbf8672656c30b378a3035cc5b83d1d8726fc5380ae171d2663420cc9177dcc1a490454d4af12f7252c8e0d2eb6b09b
SSDeep 24576:Fwf6ZCklX/Bo8AcyYKc60eDnspNstjPh:F2s7lPu8fyYKj0UsXij
TLSH D0456C979B6C0B7AE8C4AC3958231B15E679362B85FCF235C7298608FF1128449FF9C5
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.tls
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:1033
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: skahicla.pdb
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.tls
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:1033
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙