Suspicious
Suspect

malva_img_8c78493091434d9a8a386b9952d5e0ce.bin

Disk Image
MD5: e7a235a509cb241b767f46dbcabe8848
Size: 1.05 MB

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 e7a235a509cb241b767f46dbcabe8848
Sha1 41cc7ebfb6f8dfa1257b4763e42629d0e089ffe6
Sha256 7fec3c5196460fbb3f9d484f4c15bc0c63ea627479abc9865cd74428b53521c3
Sha384 30791c5f9cbb13e9a058228da6c14c452103c427ed5b27a905065a54537845d2804593d5abe6fd1d53bfc0fd0c1bec5e
Sha512 b473ed3d4ca3aa4b1dd78a8f0e5be712d858994db4e79557e8af56bd49253d7e15da0e6cd0dfe45fa9b12c723cc1ab1be48992c832a93241fe0cbf7a189874c3
SSDeep 12288:gcdqLKvxwZgDEcxcRzDLxbnXEMs05NcALhvh93jdFrv6FDqOQ:tcHZWGnbEMfLF8i
TLSH 28258D2692D241F9CE6B827C925EB731A535F410C5E7EC2A09A8FB202D32C94DFED754
PeID
Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.CRT
.tls
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1img 1
Name Value
VHD
DiscUtils extraction failed (ArgumentOutOfRangeException) for VHD.
VHD
DiskImage extraction mode: RecursiveExtractor fallback (VHD)
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.CRT
.tls
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙