atomdrift labBETA

Open-source atomic malware analysis

Analyze another

c47e0e5ed39f8985b77829071b9d06eb14eadaa0c25b0b6cc45bcc0c2491397a.gz

GZ

HOSTILE

c47e0e5ed39f8985b77829071b9d06eb14eadaa0c25b0b6cc45bcc0c2491397a

Mal-ecule

O₂(AlAs)H(Cm)Md₃(BiHeSi)

Size 497.9 KB download

First seen 32 days ago

Analyzed 32 days ago

Objectives

binary.overlay_size = 292864.00 ×4
binary.overlay_entropy = 8.00 ×3
.rsrc (size: 246784)
binary.behavioral_import_ratio = 0.02
binary.code_entropy = 6.66
binary.has_overlay = 1.00
binary.import_count = 89.00

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
41
46
48
64 A1 30 00 00 00
binary.section_count = 5.00
pe.api_hashing_indicator_count = 1.00
pe.import_dll_count = 7.00

Micro-behaviors

CreateFile
CreateFileA
CreateFileW
FlushFileBuffers
GetConsoleMode
GetFileType
GetStdHandle
ReadFile

GetModuleHandleW ×2
GetProcAddress ×2
GDI32.dll
GetCurrentProcess
GetModuleFileNameA
GetModuleFileNameW
SHELL32.dll
USER32.dll

Metadata

binary.overlay_ratio = 0.44 ×2
IHDR
binary.has_overlay = 1.00
binary.overall_entropy = 5.69
binary.overlay_size = 292864.00
binary.string_count = 560.00
c47e0e5ed39f8985b77829071b9d06eb14eadaa0c25b0b6cc45bcc0c2491397a
pe.has_checksum = 0.00

binary.import_count = 89.00 ×6
binary.func_count = 264.00 ×4
binary.avg_complexity = 11.83
binary.avg_string_entropy = 2.80
binary.sentence_string_ratio = 0.22
binary.total_basic_blocks = 4993.00
c47e0e5ed39f8985b77829071b9d06eb14eadaa0c25b0b6cc45bcc0c2491397a
pe.api_hashing_indicator_count = 1.00

.reloc ×2
.data
.data (size: 11776)
.rdata
.rdata (entropy: 6.04)
.rsrc
.text
.text (entropy: 6.66)

20 of 60 traits shown

No strings extracted

No symbols found

No sections found

file

size

509865

No key/value data available for this file.

Identity

SHA-256	c47e0e5ed39f8985b77829071b9d06eb14eadaa0c25b0b6cc45bcc0c2491397a
Canonical SHA-256	ad52d6434817f1d79c061db7deeee5e5a6911db99b057340cc8089c9a2c87587
Filename	c47e0e5ed39f8985b77829071b9d06eb14eadaa0c25b0b6cc45bcc0c2491397a.gz

Origin

Source	harvest

Timeline

First seen	12 May 2026 19:25 UTC
First analyzed	13 May 2026 04:32 UTC
Last analyzed	13 May 2026 04:32 UTC
Last updated	13 May 2026 04:32 UTC

Labeling

Label	bad
Label source	harvest
Traits version	92e78

Not seeing what you expected? Let us know