Suspicious
Suspect

dcf3b88561b92b4edb0682c8b799b37b

PE Executable
MD5: dcf3b88561b92b4edb0682c8b799b37b
Size: 1.03 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 dcf3b88561b92b4edb0682c8b799b37b
Sha1 cf040f5b58723f8836905b8d932994e26ed2ad47
Sha256 b17689e3da2c11a8034dee9389c5577366a3b4cbdfc77419c997713d5082dfc5
Sha384 033e4c91b2d8bbe7e2199d94609097f579b4ab2ebd1602613d29bf24d9b40b7b4781366ce8ce5bdee68a45ce51d498b6
Sha512 1e97e9e7dc00012921dd30d1ec0466b772f750ecdac342b44c873cb6885c1269095348290d05ae2c05e9f50fea6ec48fa9e26da56137f69e663848e0e0ab90bc
SSDeep 12288:JTOPv++9+I4iKsxxT/SQUR9SLrdx3BXOFtdmQg2BAG6fmY78JlDkFo7RGM/r5:9OP2Ar/Szk3BXI7mOBufmZfDzfr5
TLSH ED25CE06E95242AED52240F9C3B121C29E72BF441B64C5FB96D5092D4EF6DF01EFB2AC
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.tls
_RDATA
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:1033
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: hufroa.pdb
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.tls
_RDATA
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:1033
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙