Suspicious
Suspect

ecc52f0bfe092ac34a03da9d27091263

PE Executable
MD5: ecc52f0bfe092ac34a03da9d27091263
Size: 6.41 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 ecc52f0bfe092ac34a03da9d27091263
Sha1 d89ecad781eff2a4d91cd2e5a94fceffc9b72b3e
Sha256 f1987fe7cec4fee5ec52fcf6979059cab92aedc69a41d145af33a15bd9ba3ef2
Sha384 a77545a10b601612cd5543eaa1e040dbefac89d1befb910f5ed38d9e0336fd9591a4fc393005fbcbaaacfc0454ad75b5
Sha512 bf4220402a00510aeb63a08928bd84218084e79133a3d795ea9a5bee592f5fce03f586cd329ba5e793f813a858e63173a0769863fde7e29b05c42ef448144be9
SSDeep 98304:pxy066huyiEfcUy3dvxrzc77SMh83Kl5Yag6q53ZAFEG:psbyiEEUKrzk7lCkut6EpRG
TLSH 60568C13EC9148E5C09AA23189A79212BB75BC495B3223D72FA0B7783F733D06E79754
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
[Authenticode]_bbde5bad.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x61BA00 size 2432 bytes
[Authenticode]_bbde5bad.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙