Suspicious
Suspect

def7c0055909f72dd20f2d0a5f79f5c3

PE Executable
MD5: def7c0055909f72dd20f2d0a5f79f5c3
Size: 13.08 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 def7c0055909f72dd20f2d0a5f79f5c3
Sha1 f3c4990ac6ce249363bbdec35110ce79d9a4f523
Sha256 4d1a0237c82bddae9cd21a434b2e2cb65563d0af942a8b67ae70785fb5f1bf76
Sha384 25fea5bec18d93669bb86e39fbdcdeda055dfa8e2b67ca3528d87b7ea111279ef705d654a2092bcac26ec094c4229ddb
Sha512 5e1b99902f04912dbf679270f00055a48a5647fc1f161a517b51bdef8c4337aaf8390939d190b01ec554ffe4853b78efd29a720295150f618673c36d50e10779
SSDeep 49152:DdVn6JetT4FMLY79ug1W+j4aC1h352yZ9MsPMMp124uyyK7CK9GvtTGHOKSCIOH1:DdNQY/syhWZvl8OOvd
TLSH 6ED67D037D9108E9D0A6D73289B65552BB74BC4C8B3237E72E60BA782F363D19D39B50
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
[Authenticode]_32ee00a4.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0xC78800 size 2400 bytes
[Authenticode]_32ee00a4.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙