Suspicious
Suspect

e4ca2a67afe0ac06f1d6208883ef976c

PE Executable
MD5: e4ca2a67afe0ac06f1d6208883ef976c
Size: 6.28 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 e4ca2a67afe0ac06f1d6208883ef976c
Sha1 a4bbccd9dbed9b7bc3c1ef6a25b87b2c4c5ba972
Sha256 494eff403da78f4d5be23920125be3bd0f5d2d65a1ef5dd6a007e05b57292073
Sha384 006b32c1bc07ae3d17c7f02e2251490810f6f37c5c99ea0cb062974cf10eca1148d68e511e00d4f17e54cab8bb6dca37
Sha512 7b54176d52a6b960ddb15a7993449575a06849d98516b9701ca667d621ce853b530c0edaae30cc12c340790640055bb3666a1d095e25b77de959777eaa74136a
SSDeep 49152:JIwatjg7O9MlxkM70XuZDnSq24Cj8SeTJNQ9oaI/gKufVnevAttpB58DIKglbZA6:JoD+UiTJNYoXij8s51Zx
TLSH 6F563913AA5148F5E0B99731C9B74215BAB0B8894B3533D31E92FF782E723C16E79B50
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamUPolyX 0.3 -> delikontElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
[Authenticode]_5be28002.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x5AF600 size 2400 bytes
[Authenticode]_5be28002.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙