Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5: fec9ff27a05c8f56f68d22e765a6cd09
Size: 41.47 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 fec9ff27a05c8f56f68d22e765a6cd09
Sha1 d971a56ce72112e6ce01b0956b3f6be35013cb75
Sha256 2bd7ca44d7dc856bc104eefb0a01f3779bd61224b16c03d56dee1bffc8c08581
Sha384 bb5b28aafdd8dfb453ac3a2b9fec95d9906f967db7e076acedec03f586e5d975fafbed75f4771eb63e25897995eae8f9
Sha512 c3290a09c53ff361ef5106e808f3d32b01e238d0e1bc258c8c2d24e4516421cf1068223520acc007dab2a85f6e18d1c52d7a30a96bca9362a96ce9f820e40e96
SSDeep 768:CAFl6/DtHHwR1TMbYI3aW31MjHCPip1MmMbC0DH:C2Q7612YI3H1MjHCPizDoC0
TLSH D3134A8293601AF2D5DBC97085F68D6A95B1F9514B2287CF9A70C1610DB2FE43B3E38D
PeID
MASM/TASM - sig4 (h)Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
fec9ff27a05c8f56f68d22e765a6cd09
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:1033
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: C:\Users\sam\Desktop\New folder\x64\Release\GDRVLoader.pdb
An error has occurred. This application may no longer respond until reloaded. Reload 🗙