Suspicious
Suspect

edc44439050846b9aa808788e27743a2

Share on LinkedIn
Print
PE Executable
MD5: edc44439050846b9aa808788e27743a2
Size: 2.65 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 edc44439050846b9aa808788e27743a2
Sha1 36b91aada90503f15a6594e6a52c87fadb7e8297
Sha256 a1cd95fad79767dacffc857a5ce261ebba4adf9fe44ed59b9810831dd94e0689
Sha384 e4e515c7631d5c57da58869ef69376cf3deb7edadd8f8965b7433212161265d6f0bc6faa9c2d4a02b2c0d5e0ce2c0fbe
Sha512 e64f7b919e392b1dd6604ee1039c6f9ccba11a0c7b91d6e2eadc908d2d8daa00213fea0998463be8e140fd4f0aa1cef194ecd2523e43452ee92f0863e2e46c11
SSDeep 49152:AVXZDEAvVhtkEIHXkP4LavjY9EwLAhn0OWc1nc03elhzHTr7H:AVJvkEoLawWn7erf3
TLSH 67C5AD4972F83098D3FAA374D5E5653BD6723C2407E089DB039D36581FB27E056B6B22
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.tls
.gfids
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
RT_RCDATA
ID:0066
ID:1033
RT_GROUP_CURSOR4
ID:0065
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: C:\enterp-branch\dev-1824\DevOps\CTI\PRJ\Deploy\Release\CTDPL.PDB
An error has occurred. This application may no longer respond until reloaded. Reload 🗙