Suspicious
Suspect

e4cba91b5c0d368989aa175f6f7a3ca2

PE Executable
MD5: e4cba91b5c0d368989aa175f6f7a3ca2
Size: 1.19 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 e4cba91b5c0d368989aa175f6f7a3ca2
Sha1 b97b0fc9479f3e4452ed40ca7b6e048ec5639ef9
Sha256 4ea01cf424fc8eba2c5c7f2f5283d376cfae4897d20b87ac52a1c949207ae2c9
Sha384 e70bd12df632b1bd82eaa20d044f6820e2882fb54246d30b7f0e0ec2710645a9b68ec4d63ccc0210aa97d599a6aa8962
Sha512 a47ee0e89d64cf2260992b063c4b7cf77ef18d40cc45f973f2137a92c607e356f3534be63987f14ad2e341e654172a9bcb120674580dc6b39a9bdd5739feeee9
SSDeep 24576:s5PTIyz0e7halRN+4aM0UbKIt3NVcoQufz9:2TIyokhM330Ub5coV
TLSH 4545197CFB8E84EDF04A8DBD49C893B2BE4CF20925C5299E131C1E7749AB05155EE728
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.tls
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:1033
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: grefrodara.pdb
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.tls
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:1033
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙