Malicious
PE Executable
MD5: e8043f0e17526caaafa67488dd5dff9d
Size: 12.57 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
File
Size
12.57 MB · 12,570,837 B
Hashes
MD5
e8043f0e17526caaafa67488dd5dff9d
Sha1
f310d8bf3615ce2877a519640775d56f8a29c493
Sha256
121f6d62851254b75be4384deefd56bae63f09888b38f0a693099ba23c81dafb
Sha384
35ba5d8896bb549a08b6117a03e340ed1de8ffaaf1646b29aacffe75a60b70f785f65d6a1145a42c67a7ceadcbcd214b
Sha512
d851a9b0e87baea48f7b857abadd26bcca00f5e3cf9d869ac85516055c88b26c1339b6233df5edd464e77f3d77ad47aca4cefafa20b3d8423ba580851536eb8a
SSDeep
98304:tjhOBNrzuaCerzFi6bszT1JX4pG2IfZE+z:yBkKr5rszpNDy+z
TLSH
02C65B11FACB54F6F9036831406BB27F23355D058B28CB9BEB183B6AF877691187A705
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXEe8043f0e17526caaafa67488dd5dff9dT1027 · T1055Go Loader (Factory-v3)
Structure
BINOverlay_2323f6f4.bin
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Attribution | |
| GoLoader | GoLoader extraction: NotIdentified |
| Info | PE Detect: PeReader OK (file layout) |
| Info | Overlay extracted: Overlay_2323f6f4.bin (213 bytes) |