Suspicious
Suspect

fbf00e11ebf460168f7917bb47fe51e5

PE Executable
MD5: fbf00e11ebf460168f7917bb47fe51e5
Size: 27.84 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 fbf00e11ebf460168f7917bb47fe51e5
Sha1 bcec76f866cc74b7dde5a01e126d1fe423d51dd7
Sha256 b0d939113cc42319338078e15ce241ae1e70a00f259e4d47e2dcf04deb3bb224
Sha384 a4db32da8acc12363502f95b5af1b5e237ccd818d13ce598bd1556f41b0d27192258d60dc9251ff2f77d5ac10bb4f7f1
Sha512 bbab2e1be75aac1db93f6f35b4bb33c1c092445a296a57f323be4bca55d87e451fccc5bd64b3ac7ba2f75ed9c2e0c7e3063adff3b7c4db8cb6b5896a163d05b8
SSDeep 393216:IlzkYpWBXg/0n5m71Ukh8MK6BT3xGyKq+nyH9prPxN2f:Iv751UkqMfBjxGYWNf
TLSH D3571228A34742DFC36A8230696C7761FD2ED9A46608CD3AD7A9C17D3DB1C2E24C57E1
PeID
MEW 11 SE 1.2Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamUPolyX 0.3 -> delikon
[Authenticode]_b968b5de.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.tls
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x1A8C108 size 1632 bytes
[Authenticode]_b968b5de.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.tls
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙