Suspicious
Suspect

d6253455d8659b61e1ab4873ad12af81

Share on LinkedIn
Print
Disk Image
MD5: d6253455d8659b61e1ab4873ad12af81
Size: 3.91 MB

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 d6253455d8659b61e1ab4873ad12af81
Sha1 5673704d4210e23ee46060c9a44f99395742022c
Sha256 9e3400d4ee64bde5506d9b8ddc07f014cb313528b82d7a157486263dafcf2639
Sha384 019180d4b1c00eec740a9de374621644a423d17046fc5436debd2fd61c6348317e7c97651a354b4a6cfe02d3d3e5bb9e
Sha512 543447170f15d9dbaea5a8ff20c60e8c9b008ff65bd19626ece44aaedc16f51161e8e21306783085b765be0cb94e6edcbf961e7eaadc355d155f46b6952f1a67
SSDeep 49152:XvHPsCyIkEorB3Jr9m/eitvsULdrALVvtY8f/AOOWgtWp1qVXiAG:XfA9pitnZI8
TLSH 66068D37774808A6C0A3A1B884936202EBB1BD174321E7CB1797561F5F273DB6E3B259
d6253455d8659b61e1ab4873ad12af81
Penalty_Orde.exe
Overlay_da22f4b2.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:0
libbz2-1.dll
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RC
ID:01F0
ID:1028
[Authenticode]_033ffbbc.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RESDATA
ID:01FA
ID:1028
ID:01FB
ID:1028
ID:01FC
ID:1028
ID:01FD
ID:1028
RT_ICON
ID:0001
ID:1028
ID:0002
ID:1028
ID:0003
ID:1028
ID:0004
ID:1028
ID:0005
ID:1028
ID:0006
ID:1028
ID:0007
ID:1028
ID:0008
ID:1028
RT_GROUP_CURSOR4
ID:01FE
ID:1028
RT_VERSION
ID:0001
ID:1028
RT_MANIFEST
ID:0002
ID:1033
msvcp120.dll
[Authenticode]_736a7009.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
msvcp140.dll
[Authenticode]_556ff52a.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
msvcp140_1.dll
[Authenticode]_044dd016.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
msvcp140_2.dll
[Authenticode]_539e25b3.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
msvcp140_atomic_wait.dll
[Authenticode]_7806315f.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
msvcp140_codecvt_ids.dll
[Authenticode]_0e6c8714.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vccorlib140.dll
[Authenticode]_c0218757.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140.dll
[Authenticode]_91244f14.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140_1.dll
[Authenticode]_ecf5b973.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140_threads.dll
[Authenticode]_821e4d38.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

6 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 6
Name Value
ISO
DiskImage extraction mode: DiscUtils (ISO)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙