Suspect
e08ca77e5f0d1e9dade8f9fc449e2e32
MD5: e08ca77e5f0d1e9dade8f9fc449e2e32
Size: 10.72 MB
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
10.72 MB · 10,717,904 B
Hashes
MD5
e08ca77e5f0d1e9dade8f9fc449e2e32
Sha1
be5e43377e493dbfcca5c3f905ffbc947c63a8d4
Sha256
40a8e6f126c138dadecc661355e5214459ea7c63d3ed64c0b0224a810baaed16
Sha384
4e8286a17e73a56bfc1f20df6d94409a57a4b541ed0187b0992177cadd489a6fd09dc2b0ec102efee07c414f73438ae5
Sha512
27a462cab3ffffd13a7a0ad443011accbbcbee4565d86c633c5135861c452f2107d51f736d2f2b1597840be26744d84230981d20205a3785f8af9a1346fbe693
SSDeep
196608:2ksGCZ1dnon1Od0Y3i9V0TLv+ZifSNePSYokl2Qe4y2bID026mGat0o:2kCZPcOd0V9s7+ZCSNWSYoiCp6mGK
TLSH
8EB6334D33FC444AC322467BB673AD7A72EF7B7672C58B560226911C1C371AEE88844E
Detection
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
1286 files
NSISe08ca77e5f0d1e9dade8f9fc449e2e32
Structure
BINOverlay_0923bd90.bin
BINResources
BINRT_ICON
BINID:0001
BINID:1033
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINID:0006
BINID:1033
BINID:0007
BINID:1033
BINRT_DIALOG
BINID:0067
BINID:1033
BINID:0069
BINID:1033
BINID:006A
BINID:1033
BINID:006F
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0067
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
BIN[NSIS Installer] @ #0000C808
EXECoolInterface.exe
Structure
BINOverlay_c07ae07b.bin
BINResources
BINRT_ICON
BINID:0001
BINID:0
BINRT_GROUP_CURSOR4
BINID:0001
BINID:0
BINRT_MANIFEST
BINID:0001
BINID:0
DLLVCRUNTIME140.dll
Structure
P7B[Authenticode]_15219333.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_bz2.pyd
Structure
P7B[Authenticode]_9b9b73e0.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0002
BINID:1033
EXE_decimal.pyd
Structure
P7B[Authenticode]_5757e682.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_hashlib.pyd
Structure
P7B[Authenticode]_88e7828d.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_lzma.pyd
Structure
P7B[Authenticode]_2621a11b.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_queue.pyd
Structure
P7B[Authenticode]_5182a931.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_socket.pyd
Structure
P7B[Authenticode]_d9e97413.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_ssl.pyd
Structure
P7B[Authenticode]_4c55d979.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_tkinter.pyd
Structure
P7B[Authenticode]_8c7cf2a1.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLapi-ms-win-core-console-l1-1-0.dll
Structure
P7B[Authenticode]_7fc42190.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLapi-ms-win-core-datetime-l1-1-0.dll
Structure
P7B[Authenticode]_767c2e9b.p7b
DLLapi-ms-win-core-debug-l1-1-0.dll
Structure
P7B[Authenticode]_2c1559b4.p7b
DLLapi-ms-win-core-errorhandling-l1-1-0.dll
Structure
P7B[Authenticode]_484b31c9.p7b
DLLapi-ms-win-core-file-l1-1-0.dll
Structure
P7B[Authenticode]_0322b48e.p7b
DLLapi-ms-win-core-file-l1-2-0.dll
Structure
P7B[Authenticode]_993cdd8f.p7b
DLLapi-ms-win-core-file-l2-1-0.dll
Structure
P7B[Authenticode]_4fa8457d.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLapi-ms-win-core-handle-l1-1-0.dll
Structure
P7B[Authenticode]_74c31e14.p7b
DLLapi-ms-win-core-heap-l1-1-0.dll
Structure
P7B[Authenticode]_66e4991a.p7b
DLLapi-ms-win-core-interlocked-l1-1-0.dll
Structure
P7B[Authenticode]_952e3d27.p7b
DLLapi-ms-win-core-libraryloader-l1-1-0.dll
Structure
P7B[Authenticode]_51b7fe12.p7b
DLLapi-ms-win-core-localization-l1-2-0.dll
Structure
P7B[Authenticode]_f27bdc2c.p7b
DLLapi-ms-win-core-memory-l1-1-0.dll
Structure
P7B[Authenticode]_d9f14635.p7b
DLLapi-ms-win-core-namedpipe-l1-1-0.dll
Structure
P7B[Authenticode]_af3996d7.p7b
DLLapi-ms-win-core-processenvironment-l1-1-0.dll
Structure
P7B[Authenticode]_c3a02ed6.p7b
DLLapi-ms-win-core-processthreads-l1-1-0.dll
Structure
P7B[Authenticode]_83e14c27.p7b
DLLapi-ms-win-core-processthreads-l1-1-1.dll
Structure
P7B[Authenticode]_dfb5b071.p7b
DLLapi-ms-win-core-profile-l1-1-0.dll
Structure
P7B[Authenticode]_d11bacbf.p7b
DLLapi-ms-win-core-rtlsupport-l1-1-0.dll
Structure
P7B[Authenticode]_d92012bc.p7b
DLLapi-ms-win-core-string-l1-1-0.dll
Structure
P7B[Authenticode]_628e0549.p7b
DLLapi-ms-win-core-synch-l1-1-0.dll
Structure
P7B[Authenticode]_419f8df6.p7b
DLLapi-ms-win-core-synch-l1-2-0.dll
Structure
P7B[Authenticode]_876e6236.p7b
DLLapi-ms-win-core-sysinfo-l1-1-0.dll
Structure
P7B[Authenticode]_c533b774.p7b
DLLapi-ms-win-core-timezone-l1-1-0.dll
Structure
P7B[Authenticode]_b56365ac.p7b
DLLapi-ms-win-core-util-l1-1-0.dll
Structure
P7B[Authenticode]_c03255c1.p7b
DLLapi-ms-win-crt-conio-l1-1-0.dll
Structure
P7B[Authenticode]_8d8a4db9.p7b
DLLapi-ms-win-crt-convert-l1-1-0.dll
Structure
P7B[Authenticode]_d2e7f205.p7b
DLLapi-ms-win-crt-environment-l1-1-0.dll
Structure
P7B[Authenticode]_f99b64bf.p7b
DLLapi-ms-win-crt-filesystem-l1-1-0.dll
Structure
P7B[Authenticode]_75e0d5d8.p7b
DLLapi-ms-win-crt-heap-l1-1-0.dll
Structure
P7B[Authenticode]_cf27a6ee.p7b
DLLapi-ms-win-crt-locale-l1-1-0.dll
Structure
P7B[Authenticode]_d78de97f.p7b
DLLapi-ms-win-crt-math-l1-1-0.dll
Structure
P7B[Authenticode]_f2c3ad9c.p7b
DLLapi-ms-win-crt-process-l1-1-0.dll
Structure
P7B[Authenticode]_b5412ac8.p7b
DLLapi-ms-win-crt-runtime-l1-1-0.dll
Structure
P7B[Authenticode]_b9b5b9de.p7b
DLLapi-ms-win-crt-stdio-l1-1-0.dll
Structure
P7B[Authenticode]_a3df9609.p7b
DLLapi-ms-win-crt-string-l1-1-0.dll
Structure
P7B[Authenticode]_4c0a6bb1.p7b
DLLapi-ms-win-crt-time-l1-1-0.dll
Structure
P7B[Authenticode]_fc43fdd7.p7b
DLLapi-ms-win-crt-utility-l1-1-0.dll
Structure
P7B[Authenticode]_5097e26e.p7b
ZIPbase_library.zip
PYC_collections_abc.pyc
PYC_weakrefset.pyc
PYCabc.pyc
PYCcodecs.pyc
BINcollections
PYC__init__.pyc
PYCabc.pyc
PYCcopyreg.pyc
BINencodings
PYC__init__.pyc
PYCaliases.pyc
PYCascii.pyc
PYCbase64_codec.pyc
PYCbig5.pyc
PYCbig5hkscs.pyc
PYCbz2_codec.pyc
PYCcharmap.pyc
PYCcp037.pyc
PYCcp1006.pyc
PYCcp1026.pyc
PYCcp1125.pyc
PYCcp1140.pyc
PYCcp1250.pyc
PYCcp1251.pyc
PYCcp1252.pyc
PYCcp1253.pyc
PYCcp1254.pyc
PYCcp1255.pyc
PYCcp1256.pyc
PYCcp1257.pyc
PYCcp1258.pyc
PYCcp273.pyc
PYCcp424.pyc
PYCcp437.pyc
PYCcp500.pyc
PYCcp720.pyc
PYCcp737.pyc
PYCcp775.pyc
PYCcp850.pyc
PYCcp852.pyc
PYCcp855.pyc
PYCcp856.pyc
PYCcp857.pyc
PYCcp858.pyc
PYCcp860.pyc
PYCcp861.pyc
PYCcp862.pyc
PYCcp863.pyc
PYCcp864.pyc
PYCcp865.pyc
PYCcp866.pyc
PYCcp869.pyc
PYCcp874.pyc
PYCcp875.pyc
PYCcp932.pyc
PYCcp949.pyc
PYCcp950.pyc
PYCeuc_jis_2004.pyc
PYCeuc_jisx0213.pyc
PYCeuc_jp.pyc
PYCeuc_kr.pyc
PYCgb18030.pyc
PYCgb2312.pyc
PYCgbk.pyc
PYChex_codec.pyc
PYChp_roman8.pyc
PYChz.pyc
PYCidna.pyc
PYCiso2022_jp.pyc
PYCiso2022_jp_1.pyc
PYCiso2022_jp_2.pyc
PYCiso2022_jp_2004.pyc
PYCiso2022_jp_3.pyc
PYCiso2022_jp_ext.pyc
PYCiso2022_kr.pyc
PYCiso8859_1.pyc
PYCiso8859_10.pyc
PYCiso8859_11.pyc
PYCiso8859_13.pyc
PYCiso8859_14.pyc
PYCiso8859_15.pyc
PYCiso8859_16.pyc
PYCiso8859_2.pyc
PYCiso8859_3.pyc
PYCiso8859_4.pyc
PYCiso8859_5.pyc
PYCiso8859_6.pyc
PYCiso8859_7.pyc
PYCiso8859_8.pyc
PYCiso8859_9.pyc
PYCjohab.pyc
PYCkoi8_r.pyc
PYCkoi8_t.pyc
PYCkoi8_u.pyc
PYCkz1048.pyc
PYClatin_1.pyc
PYCmac_arabic.pyc
PYCmac_croatian.pyc
PYCmac_cyrillic.pyc
PYCmac_farsi.pyc
PYCmac_greek.pyc
PYCmac_iceland.pyc
PYCmac_latin2.pyc
PYCmac_roman.pyc
PYCmac_romanian.pyc
PYCmac_turkish.pyc
PYCmbcs.pyc
PYCoem.pyc
PYCpalmos.pyc
PYCptcp154.pyc
PYCpunycode.pyc
PYCquopri_codec.pyc
PYCraw_unicode_escape.pyc
PYCrot_13.pyc
PYCshift_jis.pyc
PYCshift_jis_2004.pyc
PYCshift_jisx0213.pyc
PYCtis_620.pyc
PYCundefined.pyc
PYCunicode_escape.pyc
PYCutf_16.pyc
PYCutf_16_be.pyc
PYCutf_16_le.pyc
PYCutf_32.pyc
PYCutf_32_be.pyc
PYCutf_32_le.pyc
PYCutf_7.pyc
PYCutf_8.pyc
PYCutf_8_sig.pyc
PYCuu_codec.pyc
PYCzlib_codec.pyc
PYCenum.pyc
PYCfunctools.pyc
PYCgenericpath.pyc
PYCheapq.pyc
PYCio.pyc
PYCkeyword.pyc
PYClinecache.pyc
PYClocale.pyc
PYCntpath.pyc
PYCoperator.pyc
PYCos.pyc
PYCposixpath.pyc
PYCre.pyc
PYCreprlib.pyc
PYCsre_compile.pyc
PYCsre_constants.pyc
PYCsre_parse.pyc
PYCstat.pyc
PYCtraceback.pyc
PYCtypes.pyc
PYCwarnings.pyc
PYCweakref.pyc
DLLlibcrypto-1_1.dll
Structure
P7B[Authenticode]_805ac760.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLlibssl-1_1.dll
Structure
P7B[Authenticode]_de7271b7.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLpython3.dll
Structure
P7B[Authenticode]_7e81649d.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLpython310.dll
Structure
P7B[Authenticode]_05e2af05.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXEselect.pyd
Structure
P7B[Authenticode]_b8be417c.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLtcl86t.dll
Structure
P7B[Authenticode]_9174382e.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
VBStk86t.dll
Structure
P7B[Authenticode]_bdaf2789.p7b
BINResources
BINRT_CURSOR
BINID:000E
BINID:1033
BINID:000F
BINID:1033
BINID:0010
BINID:1033
BINID:0011
BINID:1033
BINID:0012
BINID:1033
BINID:0013
BINID:1033
BINID:0014
BINID:1033
BINID:0015
BINID:1033
BINID:0016
BINID:1033
BINID:0017
BINID:1033
BINID:0018
BINID:1033
BINID:0019
BINID:1033
BINID:001A
BINID:1033
BINID:001B
BINID:1033
BINID:001C
BINID:1033
BINID:001D
BINID:1033
BINID:001E
BINID:1033
BINID:001F
BINID:1033
BINID:0020
BINID:1033
BINID:0021
BINID:1033
BINID:0022
BINID:1033
BINID:0023
BINID:1033
BINID:0024
BINID:1033
BINID:0025
BINID:1033
BINID:0026
BINID:1033
BINID:0027
BINID:1033
BINID:0028
BINID:1033
BINID:0029
BINID:1033
BINID:002A
BINID:1033
BINID:002B
BINID:1033
BINID:002C
BINID:1033
BINID:002D
BINID:1033
BINID:002E
BINID:1033
BINID:002F
BINID:1033
BINID:0030
BINID:1033
BINID:0031
BINID:1033
BINID:0032
BINID:1033
BINID:0033
BINID:1033
BINID:0034
BINID:1033
BINID:0035
BINID:1033
BINID:0036
BINID:1033
BINID:0037
BINID:1033
BINID:0038
BINID:1033
BINID:0039
BINID:1033
BINID:003A
BINID:1033
BINID:003B
BINID:1033
BINID:003C
BINID:1033
BINID:003D
BINID:1033
BINID:003E
BINID:1033
BINID:003F
BINID:1033
BINID:0040
BINID:1033
BINID:0041
BINID:1033
BINID:0042
BINID:1033
BINID:0043
BINID:1033
BINID:0044
BINID:1033
BINID:0045
BINID:1033
BINID:0046
BINID:1033
BINID:0047
BINID:1033
BINID:0048
BINID:1033
BINID:0049
BINID:1033
BINID:004A
BINID:1033
BINID:004B
BINID:1033
BINID:004C
BINID:1033
BINID:004D
BINID:1033
BINID:004E
BINID:1033
BINID:004F
BINID:1033
BINID:0050
BINID:1033
BINID:0051
BINID:1033
BINID:0052
BINID:1033
BINID:0053
BINID:1033
BINID:0054
BINID:1033
BINID:0055
BINID:1033
BINID:0056
BINID:1033
BINID:0057
BINID:1033
BINID:0058
BINID:1033
BINID:0059
BINID:1033
BINID:005A
BINID:1033
BINID:005B
BINID:1033
BINRT_BITMAP
BINID:0000
BINID:1033
BINRT_ICON
BINID:0001
BINID:1033
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINID:0006
BINID:1033
BINID:0007
BINID:1033
BINID:0008
BINID:1033
BINID:0009
BINID:1033
BINID:000A
BINID:1033
BINID:000B
BINID:1033
BINID:000C
BINID:1033
BINID:000D
BINID:1033
BINRT_DIALOG
BINID:0600
BINID:1033
BINRT_GROUP_CURSOR2
BINID:0000
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0000
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
DLLucrtbase.dll
Structure
P7B[Authenticode]_8b90e9c3.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXEunicodedata.pyd
Structure
P7B[Authenticode]_71d3ca44.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
JSONsettings.json
PEMcacert.pem
EXE_rust.pyd
Structure
BININSTALLER
BINLICENSE
BINLICENSE.APACHE
BSDLICENSE.BSD
BINMETADATA
BINRECORD
BINWHEEL
TXTtop_level.txt
TCLauto.tcl
TCLclock.tcl
TCLhistory.tcl
TCLinit.tcl
TCLpackage.tcl
TCLparray.tcl
TCLsafe.tcl
VBStclIndex
TCLtm.tcl
TCLword.tcl
ENCascii.enc
ENCbig5.enc
ENCcp1250.enc
ENCcp1251.enc
ENCcp1252.enc
ENCcp1253.enc
ENCcp1254.enc
ENCcp1255.enc
ENCcp1256.enc
ENCcp1257.enc
ENCcp1258.enc
ENCcp437.enc
ENCcp737.enc
ENCcp775.enc
ENCcp850.enc
ENCcp852.enc
ENCcp855.enc
ENCcp857.enc
ENCcp860.enc
ENCcp861.enc
ENCcp862.enc
ENCcp863.enc
ENCcp864.enc
ENCcp865.enc
ENCcp866.enc
ENCcp869.enc
ENCcp874.enc
ENCcp932.enc
ENCcp936.enc
ENCcp949.enc
ENCcp950.enc
ENCdingbats.enc
ENCebcdic.enc
ENCeuc-cn.enc
ENCeuc-jp.enc
ENCeuc-kr.enc
ENCgb12345.enc
ENCgb1988.enc
ENCgb2312-raw.enc
ENCiso2022-jp.enc
ENCiso2022-kr.enc
ENCiso2022.enc
ENCiso8859-1.enc
ENCiso8859-10.enc
ENCiso8859-13.enc
ENCiso8859-14.enc
ENCiso8859-15.enc
ENCiso8859-16.enc
ENCiso8859-2.enc
ENCiso8859-3.enc
ENCiso8859-4.enc
ENCiso8859-5.enc
ENCiso8859-6.enc
ENCiso8859-7.enc
ENCiso8859-8.enc
ENCiso8859-9.enc
ENCjis0201.enc
ENCjis0208.enc
ENCjis0212.enc
ENCkoi8-r.enc
ENCkoi8-u.enc
ENCksc5601.enc
ENCmacCentEuro.enc
ENCmacCroatian.enc
ENCmacCyrillic.enc
ENCmacDingbats.enc
ENCmacGreek.enc
ENCmacIceland.enc
ENCmacJapan.enc
ENCmacRoman.enc
ENCmacRomania.enc
ENCmacThai.enc
ENCmacTurkish.enc
ENCmacUkraine.enc
ENCshiftjis.enc
ENCsymbol.enc
ENCtis-620.enc
TCLhttp.tcl
TCLpkgIndex.tcl
MSGaf.msg
MSGaf_za.msg
MSGar.msg
MSGar_in.msg
MSGar_jo.msg
MSGar_lb.msg
MSGar_sy.msg
MSGbe.msg
MSGbg.msg
MSGbn.msg
MSGbn_in.msg
MSGca.msg
MSGcs.msg
MSGda.msg
MSGde.msg
MSGde_at.msg
MSGde_be.msg
MSGel.msg
MSGen_au.msg
MSGen_be.msg
MSGen_bw.msg
MSGen_ca.msg
MSGen_gb.msg
MSGen_hk.msg
MSGen_ie.msg
MSGen_in.msg
MSGen_nz.msg
MSGen_ph.msg
MSGen_sg.msg
MSGen_za.msg
MSGen_zw.msg
MSGeo.msg
MSGes.msg
MSGes_ar.msg
MSGes_bo.msg
MSGes_cl.msg
MSGes_co.msg
MSGes_cr.msg
MSGes_do.msg
MSGes_ec.msg
MSGes_gt.msg
MSGes_hn.msg
MSGes_mx.msg
MSGes_ni.msg
MSGes_pa.msg
MSGes_pe.msg
MSGes_pr.msg
MSGes_py.msg
MSGes_sv.msg
MSGes_uy.msg
MSGes_ve.msg
MSGet.msg
MSGeu.msg
MSGeu_es.msg
MSGfa.msg
MSGfa_in.msg
MSGfa_ir.msg
MSGfi.msg
MSGfo.msg
MSGfo_fo.msg
MSGfr.msg
MSGfr_be.msg
MSGfr_ca.msg
MSGfr_ch.msg
MSGga.msg
MSGga_ie.msg
MSGgl.msg
MSGgl_es.msg
MSGgv.msg
MSGgv_gb.msg
MSGhe.msg
MSGhi.msg
MSGhi_in.msg
MSGhr.msg
MSGhu.msg
MSGid.msg
MSGid_id.msg
MSGis.msg
MSGit.msg
MSGit_ch.msg
MSGja.msg
MSGkl.msg
MSGkl_gl.msg
MSGko.msg
MSGko_kr.msg
MSGkok.msg
MSGkok_in.msg
MSGkw.msg
MSGkw_gb.msg
MSGlt.msg
MSGlv.msg
MSGmk.msg
MSGmr.msg
MSGmr_in.msg
MSGms.msg
MSGms_my.msg
MSGmt.msg
MSGnb.msg
MSGnl.msg
MSGnl_be.msg
MSGnn.msg
MSGpl.msg
MSGpt.msg
MSGpt_br.msg
MSGro.msg
MSGru.msg
MSGru_ua.msg
MSGsh.msg
MSGsk.msg
MSGsl.msg
MSGsq.msg
MSGsr.msg
MSGsv.msg
MSGsw.msg
MSGta.msg
MSGta_in.msg
MSGte.msg
MSGte_in.msg
MSGth.msg
MSGtr.msg
MSGuk.msg
MSGvi.msg
MSGzh.msg
MSGzh_cn.msg
MSGzh_hk.msg
MSGzh_sg.msg
MSGzh_tw.msg
TCLoptparse.tcl
BINCET
BINCST6CDT
BINCuba
BINEET
BINEST
BINEST5EDT
BINEgypt
BINEire
BINGB
BINGB-Eire
BINGMT
BINGMT+0
BINGMT-0
BINGMT0
BINGreenwich
BINHST
BINHongkong
BINIceland
BINIran
BINIsrael
BINJamaica
BINJapan
BINKwajalein
BINLibya
BINMET
BINMST
BINMST7MDT
BINNZ
BINNZ-CHAT
BINNavajo
BINPRC
BINPST8PDT
BINPoland
BINPortugal
BINROC
BINROK
BINSingapore
BINTurkey
BINUCT
BINUTC
BINUniversal
BINW-SU
BINWET
BINZulu
BINAbidjan
BINAccra
BINAddis_Ababa
BINAlgiers
BINAsmara
BINAsmera
BINBamako
BINBangui
BINBanjul
BINBissau
BINBlantyre
BINBrazzaville
BINBujumbura
BINCairo
BINCasablanca
BINCeuta
BINConakry
BINDakar
BINDar_es_Salaam
BINDjibouti
BINDouala
BINEl_Aaiun
BINFreetown
BINGaborone
BINHarare
BINJohannesburg
BINJuba
BINKampala
BINKhartoum
BINKigali
BINKinshasa
BINLagos
BINLibreville
BINLome
BINLuanda
BINLubumbashi
BINLusaka
BINMalabo
BINMaputo
BINMaseru
BINMbabane
BINMogadishu
BINMonrovia
BINNairobi
BINNdjamena
BINNiamey
BINNouakchott
BINOuagadougou
BINPorto-Novo
BINSao_Tome
BINTimbuktu
BINTripoli
BINTunis
BINWindhoek
BINAdak
BINAnchorage
BINAnguilla
BINAntigua
BINAraguaina
BINAruba
BINAsuncion
BINAtikokan
BINAtka
BINBahia
BINBahia_Banderas
BINBarbados
BINBelem
BINBelize
BINBlanc-Sablon
BINBoa_Vista
BINBogota
BINBoise
BINBuenos_Aires
BINCambridge_Bay
BINCampo_Grande
BINCancun
BINCaracas
BINCatamarca
BINCayenne
BINCayman
BINChicago
BINChihuahua
BINCoral_Harbour
BINCordoba
BINCosta_Rica
BINCreston
BINCuiaba
BINCuracao
BINDanmarkshavn
BINDawson
BINDawson_Creek
BINDenver
BINDetroit
BINDominica
BINEdmonton
BINEirunepe
BINEl_Salvador
BINEnsenada
BINFort_Nelson
BINFort_Wayne
BINFortaleza
BINGlace_Bay
BINGodthab
BINGoose_Bay
BINGrand_Turk
BINGrenada
BINGuadeloupe
BINGuatemala
BINGuayaquil
BINGuyana
BINHalifax
BINHavana
BINHermosillo
BINIndianapolis
BINInuvik
BINIqaluit
BINJujuy
BINJuneau
BINKnox_IN
BINKralendijk
BINLa_Paz
BINLima
BINLos_Angeles
BINLouisville
BINLower_Princes
BINMaceio
BINManagua
BINManaus
BINMarigot
BINMartinique
BINMatamoros
BINMazatlan
BINMendoza
BINMenominee
BINMerida
BINMetlakatla
BINMexico_City
BINMiquelon
BINMoncton
BINMonterrey
BINMontevideo
BINMontreal
BINMontserrat
BINNassau
BINNew_York
BINNipigon
BINNome
BINNoronha
BINOjinaga
BINPanama
BINPangnirtung
BINParamaribo
BINPhoenix
BINPort-au-Prince
BINPort_of_Spain
BINPorto_Acre
BINPorto_Velho
BINPuerto_Rico
BINPunta_Arenas
BINRainy_River
BINRankin_Inlet
BINRecife
BINRegina
BINResolute
BINRio_Branco
BINRosario
BINSanta_Isabel
BINSantarem
BINSantiago
BINSanto_Domingo
BINSao_Paulo
BINScoresbysund
BINShiprock
BINSitka
BINSt_Barthelemy
BINSt_Johns
BINSt_Kitts
BINSt_Lucia
BINSt_Thomas
BINSt_Vincent
BINSwift_Current
BINTegucigalpa
BINThule
BINThunder_Bay
BINTijuana
BINToronto
BINTortola
BINVancouver
BINVirgin
BINWhitehorse
BINWinnipeg
BINYakutat
BINYellowknife
BINComodRivadavia
BINLa_Rioja
BINRio_Gallegos
BINSalta
BINSan_Juan
BINSan_Luis
BINTucuman
BINUshuaia
BINKnox
BINMarengo
BINPetersburg
BINTell_City
BINVevay
BINVincennes
BINWinamac
BINMonticello
BINBeulah
BINCenter
BINNew_Salem
BINCasey
BINDavis
BINDumontDUrville
BINMacquarie
BINMawson
BINMcMurdo
BINPalmer
BINRothera
BINSouth_Pole
BINSyowa
BINTroll
BINVostok
BINLongyearbyen
BINAden
BINAlmaty
BINAmman
BINAnadyr
BINAqtau
BINAqtobe
BINAshgabat
BINAshkhabad
BINAtyrau
BINBaghdad
BINBahrain
BINBaku
BINBangkok
BINBarnaul
BINBeirut
BINBishkek
BINBrunei
BINCalcutta
BINChita
BINChoibalsan
BINChongqing
BINChungking
BINColombo
BINDacca
BINDamascus
BINDhaka
BINDili
BINDubai
BINDushanbe
BINFamagusta
BINGaza
BINHarbin
BINHebron
BINHo_Chi_Minh
BINHong_Kong
BINHovd
BINIrkutsk
BINIstanbul
BINJakarta
BINJayapura
BINJerusalem
BINKabul
BINKamchatka
BINKarachi
BINKashgar
BINKathmandu
BINKatmandu
BINKhandyga
BINKolkata
BINKrasnoyarsk
BINKuala_Lumpur
BINKuching
BINKuwait
BINMacao
BINMacau
BINMagadan
BINMakassar
BINManila
BINMuscat
BINNicosia
BINNovokuznetsk
BINNovosibirsk
BINOmsk
BINOral
BINPhnom_Penh
BINPontianak
BINPyongyang
BINQatar
BINQostanay
BINQyzylorda
BINRangoon
BINRiyadh
BINSaigon
BINSakhalin
BINSamarkand
BINSeoul
BINShanghai
BINSrednekolymsk
BINTaipei
BINTashkent
BINTbilisi
BINTehran
BINTel_Aviv
BINThimbu
BINThimphu
BINTokyo
BINTomsk
BINUjung_Pandang
BINUlaanbaatar
BINUlan_Bator
BINUrumqi
BINUst-Nera
BINVientiane
BINVladivostok
BINYakutsk
BINYangon
BINYekaterinburg
BINYerevan
BINAzores
BINBermuda
BINCanary
BINCape_Verde
BINFaeroe
BINFaroe
BINJan_Mayen
BINMadeira
BINReykjavik
BINSouth_Georgia
BINSt_Helena
BINStanley
BINACT
BINAdelaide
BINBrisbane
BINBroken_Hill
BINCanberra
BINCurrie
BINDarwin
BINEucla
BINHobart
BINLHI
BINLindeman
BINLord_Howe
BINMelbourne
BINNSW
BINNorth
BINPerth
BINQueensland
BINSouth
BINSydney
BINTasmania
BINVictoria
BINWest
BINYancowinna
BINAcre
BINDeNoronha
BINEast
BINAtlantic
BINCentral
BINEast-Saskatchewan
BINEastern
BINMountain
BINNewfoundland
BINPacific
BINSaskatchewan
BINYukon
BINContinental
BINEasterIsland
BINGMT+1
BINGMT+10
BINGMT+11
BINGMT+12
BINGMT+2
BINGMT+3
BINGMT+4
BINGMT+5
BINGMT+6
BINGMT+7
BINGMT+8
BINGMT+9
BINGMT-1
BINGMT-10
BINGMT-11
BINGMT-12
BINGMT-13
BINGMT-14
BINGMT-2
BINGMT-3
BINGMT-4
BINGMT-5
BINGMT-6
BINGMT-7
BINGMT-8
BINGMT-9
BINAmsterdam
BINAndorra
BINAstrakhan
BINAthens
BINBelfast
BINBelgrade
BINBerlin
BINBratislava
BINBrussels
BINBucharest
BINBudapest
BINBusingen
BINChisinau
BINCopenhagen
BINDublin
BINGibraltar
BINGuernsey
BINHelsinki
BINIsle_of_Man
BINJersey
BINKaliningrad
BINKiev
BINKirov
BINLisbon
BINLjubljana
BINLondon
BINLuxembourg
BINMadrid
BINMalta
BINMariehamn
BINMinsk
BINMonaco
BINMoscow
BINOslo
BINParis
BINPodgorica
BINPrague
BINRiga
BINRome
BINSamara
BINSan_Marino
BINSarajevo
BINSaratov
BINSimferopol
BINSkopje
BINSofia
BINStockholm
BINTallinn
BINTirane
BINTiraspol
BINUlyanovsk
BINUzhgorod
BINVaduz
BINVatican
BINVienna
BINVilnius
BINVolgograd
BINWarsaw
BINZagreb
BINZaporozhye
BINZurich
BINAntananarivo
BINChagos
BINChristmas
BINCocos
BINComoro
BINKerguelen
BINMahe
BINMaldives
BINMauritius
BINMayotte
BINReunion
BINBajaNorte
BINBajaSur
BINGeneral
BINApia
BINAuckland
BINBougainville
BINChatham
BINChuuk
BINEaster
BINEfate
BINEnderbury
BINFakaofo
BINFiji
BINFunafuti
BINGalapagos
BINGambier
BINGuadalcanal
BINGuam
BINHonolulu
BINJohnston
BINKiritimati
BINKosrae
BINMajuro
BINMarquesas
BINMidway
BINNauru
BINNiue
BINNorfolk
BINNoumea
BINPago_Pago
BINPalau
BINPitcairn
BINPohnpei
BINPonape
BINPort_Moresby
BINRarotonga
BINSaipan
BINSamoa
BINTahiti
BINTarawa
BINTongatapu
BINTruk
BINWake
BINWallis
BINYap
BINAST4
BINAST4ADT
BINCST6
BINEST5
BINHST10
BINMST7
BINPST8
BINYST9
BINYST9YDT
BINAlaska
BINAleutian
BINArizona
BINEast-Indiana
BINHawaii
BINIndiana-Starke
BINMichigan
BINPacific-New
TMplatform-1.0.14.tm
TMshell-1.1.4.tm
TMmsgcat-1.6.1.tm
TMtcltest-2.5.1.tm
TMhttp-2.9.1.tm
TCLbgerror.tcl
TCLbutton.tcl
TCLchoosedir.tcl
TCLclrpick.tcl
TCLcomdlg.tcl
TCLconsole.tcl
TCLdialog.tcl
TCLentry.tcl
TCLfocus.tcl
TCLfontchooser.tcl
TCLiconlist.tcl
TCLicons.tcl
BINlicense.terms
TCLlistbox.tcl
TCLmegawidget.tcl
TCLmenu.tcl
TCLmkpsenc.tcl
VBSmsgbox.tcl
VBSobsolete.tcl
TCLoptMenu.tcl
TCLpalette.tcl
TCLpanedwindow.tcl
TCLsafetk.tcl
TCLscale.tcl
TCLscrlbar.tcl
TCLspinbox.tcl
TCLtearoff.tcl
TCLtext.tcl
TCLtk.tcl
TCLtkfbox.tcl
TCLunsupported.tcl
TCLxmfbox.tcl
BINREADME
EPSlogo.eps
IMGlogo100.gif
IMGlogo100.gif-preview.png
IMGlogo64.gif
IMGlogo64.gif-preview.png
IMGlogoLarge.gif
IMGlogoLarge.gif-preview.png
IMGlogoMed.gif
IMGlogoMed.gif-preview.png
EPSpwrdLogo.eps
IMGpwrdLogo100.gif
IMGpwrdLogo100.gif-preview.png
IMGpwrdLogo150.gif
IMGpwrdLogo150.gif-preview.png
IMGpwrdLogo175.gif
IMGpwrdLogo175.gif-preview.png
IMGpwrdLogo200.gif
IMGpwrdLogo200.gif-preview.png
IMGpwrdLogo75.gif
IMGpwrdLogo75.gif-preview.png
IMGtai-ku.gif
IMGtai-ku.gif-preview.png
MSGen.msg
TCLaltTheme.tcl
TCLaquaTheme.tcl
TCLclamTheme.tcl
TCLclassicTheme.tcl
TCLcombobox.tcl
TCLcursors.tcl
TCLdefaults.tcl
TCLfonts.tcl
TCLmenubutton.tcl
TCLnotebook.tcl
TCLprogress.tcl
TCLscrollbar.tcl
TCLsizegrip.tcl
TCLtreeview.tcl
TCLttk.tcl
TCLutils.tcl
TCLvistaTheme.tcl
TCLwinTheme.tcl
TCLxpTheme.tcl
VBS[SETUP_DECOMPILED.NSI]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 10
STICH kept: 2secondary ignored: 8
bin
7img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:dll
Shape
pe:exe>pe:dll
2 nodes
Path
pe:exe>scr:vbs
Shape
pe:exe>scr:vbs
2 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Overlay extracted: Overlay_0923bd90.bin (10666704 bytes) |
1286 files
NSISe08ca77e5f0d1e9dade8f9fc449e2e32
Structure
BINOverlay_0923bd90.bin
BINResources
BIN[NSIS Installer] @ #0000C808
No malware configuration was found at this point.
You must be signed in to view YARA rules.