Suspicious
Suspect

e6bd58f332c9aabe502e35ccedb38313

Share on LinkedIn
Print
PE Executable
MD5: e6bd58f332c9aabe502e35ccedb38313
Size: 20.69 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 e6bd58f332c9aabe502e35ccedb38313
Sha1 a4c1719efe4255d5c34366b87e0046c3864c0c15
Sha256 44cd0e97316c4ed137b1612e5b4d56f7caaa0250d3badbb344927671a6979714
Sha384 c4f3349bdf934418aa628489579ff5bfe69174111f53177bb79fbc21b7d3efe65b5669e1f07f337dcec46002c16c26ea
Sha512 ca3586a4a0464a04184178750248375e6334951b694b0eca5a736bc15488e1e9979e6072e62885d75dc0985cbd39c2975f0c9bf7bf57ef35a0d7d03379c625b9
SSDeep 393216:cbK9ulRepI9r3MMHoBXoOjFz3kzUB7BuWMSbrSksIGt4lQR7Po9bSPhLU/4Hzi60:vufa2VepBz3mi7gWM8rSNI2NR7AUZjHI
TLSH 5A273327B2CB653FF0BA4A3A5A77D117953B6A2065238C2687F4489DCE251D10E3F34B
PeID
Borland Delphi 4.0Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12UPolyX 0.3 -> delikon
Overlay_0f445c0d.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.itext
.data
.bss
.idata
.didata
.edata
.tls
.rdata
.reloc
.rsrc
Resources
RT_ICON
ID:0064
ID:1033
ID:0065
ID:1033
ID:0066
ID:1033
ID:0067
ID:1033
ID:1033-preview.png
RT_STRING
ID:0FF5
ID:0
ID:0FF6
ID:0
ID:0FF7
ID:0
ID:0FF8
ID:0
ID:0FF9
ID:0
ID:0FFA
ID:0
ID:0FFB
ID:0
ID:0FFC
ID:0
ID:0FFD
ID:0
ID:0FFE
ID:0
ID:0FFF
ID:0
ID:1000
ID:0
RT_RCDATA
ID:0000
ID:0
ID:2B67
ID:0
RT_GROUP_CURSOR4
ID:0000
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_0f445c0d.bin (19783117 bytes)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙