Suspicious
Suspect

dbdc539ce2276d056e3da79e5b556cba

PE Executable
MD5: dbdc539ce2276d056e3da79e5b556cba
Size: 2.72 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 dbdc539ce2276d056e3da79e5b556cba
Sha1 be359a25b1ed3d17fb2aad16d8d6c81fcda6a319
Sha256 54c8c1fa5c44506bb1feb7c8657ef6b761b0e1d1e4a8dbe2b52eea5a89296562
Sha384 45d28f2e8d4707564bbc3f5b62345b5e901391417adb64f12c6b1961e5b73d0ee6652fdaee317f00eeb69546731d82e9
Sha512 0b0dc1de21aa6ce6958820cbadb00b3860af99af0efb48a9657ceeae4769efda2079faad8f2518306a30828a30e9e928f4bef81a67eb96130abedc708e77400f
SSDeep 24576:yub+9ZWgfIzjTrZwAShG/dspMwRuytjtGDBRmT2w+wazAoBele5r9DXmm5dEADk8:yubQJfgTVNS4l+OytjtuCTtO9lA8
TLSH BFC54A17BD9048E9C09AE33289A74656BB75BC4C0B3233E72E90BA782F727D05D35B54
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
[Authenticode]_be849375.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x296A00 size 2400 bytes
[Authenticode]_be849375.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙