dc5ced17f0c85fef8a1fa466796a84fb83592eb7c8a86302d9b0cc9e5837c140

HOSTILE

dc5ced17f0c85fef8a1fa466796a84fb83592eb7c8a86302d9b0cc9e5837c140 · 92%

Mal-ecule

K(Mc)O(As₄)Md(Bi₃)

Size 280.0 KB download

First seen 1 day ago

Analyzed 1 day ago

Ecosystem windows

Source abuse.ch

Also detected by 2 sources

Importless PE with opaque single-section code body: bin.exe:0x0

Importless PE with concealed strings and packed code: bin.exe:0x0

Large high-entropy executable PE text section: bin.exe:0x1000

bin.exe pe

0x0	4d5a4552e8000000005883e8098bc883	MZER.....X......Importless PE with concealed strings and packed code
0x10	c03c8b0003c183c0280308ffe1900000	.<......(.......
0x20	00000000000000000000000000000000	................
0x30	000000000000000000000000b8000000	................
0x40	0e1fba0e00b409cd21b8014ccd215468	........!..L.!Th
0x50	69732070726f6772616d2063616e6e6f	is program canno
0x60	742062652072756e20696e20444f5320	t be run in DOS
0x70	6d6f64652e0d0d0a2400000000000000	mode....$.......
0x80	d97013f69d117da59d117da59d117da5	.p....}...}...}.
0x90	bad7b2a598117da5bad7b0a59c117da5	......}.......}.
0xa0	bad7b1a59c117da5526963689d117da5	......}.Rich..}.
0xb0	0000000000000000504500004c010100	........PE..L...
0xc0	c826485b0000000000000000e0000201	.&H[............
0xd0	0b010c00005004000000000000000000	.....P..........
0xe0	b0260000001000000060040000004000	.&.......`....@.
0xf0	00100000000200000600010000000000	................
0x100	06000100000000000060040000020000	.........`......
0x110	00000000020040810000100000100000	......@.........
0x120	00001000001000000000000010000000	................
0x130	00000000000000000000000000000000	................
0x140	00000000000000000000000000000000	................
0x150	00000000000000000000000000000000	................
0x160	00000000000000000000000000000000	................
0x170	0000000000	.....

0xf80	00000000000000000000000000000000	................
0xf90	00000000000000000000000000000000	................
0xfa0	00000000000000000000000000000000	................
0xfb0	00000000000000000000000000000000	................
0xfc0	00000000000000000000000000000000	................
0xfd0	00000000000000000000000000000000	................
0xfe0	00000000000000000000000000000000	................
0xff0	00000000000000000000000000000000	................
0x1000	558bec83ec4456578b7d08c745bc2bf5	U....DVW.}..E.+.Importless PE with concealed strings and packed code
0x1010	922fc745c0b93b827ec745c47e7e7eff	./.E..;.~.E.~~~.
0x1020	c745c803826e43c745cc7e7e0356c745	.E...nC.E.~~.V.E
0x1030	d0f53b82fdc745d4be7ff73bc745d882	..;...E....;.E..
0x1040	f53382c745dcff9f7d7ec745e07efe07	.3..E...}~.E.~..
0x1050	7bc745e437fdb782c745e83ffbb70bc7	{.E.7....E.?....
0x1060	45ec77f52b82c745f0fdbc7ff7c745f4	E.w.+..E......E.
0x1070	2b8295b1c745f84dbef59bc745fc23bd	+....E.M....E.#.
0x1080	0000b9100000008d75bcf3a566a5a45f	........u...f.._
0x1090	5e8be55dc3f3ba7f9511997a1a64342b	^..].......z.d4+
0x10a0	558bec81ec8405000056578965c48b45	U........VW.e..E
0x10b0	c48945fc8b4dfc81c12b0100002b4dfc	..E..M...+...+M.
0x10c0	898dc0feffffc645df000fb655df85d2	.......E....U...
0x10d0	753a8b45c48985c4feffff8b8dc4feff	u:.E............
0x10e0	ff8b1181f2cc2f874a81facc66f97575	....../.J...f.uu
0x10f0	10c645df018b45c42b85c0feffff8945	..E...E.+......E
0x1100	fc8b4dc483c101894dc4ebbe8b55fc8a	..M.....M....U..
0x1110	82f00200008845dd8b4dfc8b55fc8b42	......E..M..U..B
0x1120	64	d

Well-known

0xf80	00000000000000000000000000000000	................
0xf90	00000000000000000000000000000000	................
0xfa0	00000000000000000000000000000000	................
0xfb0	00000000000000000000000000000000	................
0xfc0	00000000000000000000000000000000	................
0xfd0	00000000000000000000000000000000	................
0xfe0	00000000000000000000000000000000	................
0xff0	00000000000000000000000000000000	................
0x1000	558bec83ec4456578b7d08c745bc2bf5	U....DVW.}..E.+.
0x1010	922fc745c0b93b827ec745c47e7e7eff	./.E..;.~.E.~~~.
0x1020	c745c803826e43c745cc7e7e0356c745	.E...nC.E.~~.V.E
0x1030	d0f53b82fdc745d4be7ff73bc745d882	..;...E....;.E..
0x1040	f53382c745dcff9f7d7ec745e07efe07	.3..E...}~.E.~..
0x1050	7bc745e437fdb782c745e83ffbb70bc7	{.E.7....E.?....
0x1060	45ec77f52b82c745f0fdbc7ff7c745f4	E.w.+..E......E.
0x1070	2b8295b1c745f84dbef59bc745fc23bd	+....E.M....E.#.
0x1080	0000b9100000008d75bcf3a566a5a45f	........u...f.._
0x1090	5e8be55dc3f3ba7f9511997a1a64342b	^..].......z.d4+
0x10a0	558bec81ec8405000056578965c48b45	U........VW.e..E
0x10b0	c48945fc8b4dfc81c12b0100002b4dfc	..E..M...+...+M.
0x10c0	898dc0feffffc645df000fb655df85d2	.......E....U...
0x10d0	753a8b45c48985c4feffff8b8dc4feff	u:.E............
0x10e0	ff8b1181f2cc2f874a81facc66f97575	....../.J...f.uu
0x10f0	10c645df018b45c42b85c0feffff8945	..E...E.+......E
0x1100	fc8b4dc483c101894dc4ebbe8b55fc8a	..M.....M....U..
0x1110	82f00200008845dd8b4dfc8b55fc8b42	......E..M..U..B
0x1120	64	d

Objectives

0x0	4d5a4552e8000000005883e8098bc883	MZER.....X......
0x10	c03c8b0003c183c0280308ffe1900000	.<......(.......
0x20	00000000000000000000000000000000	................
0x30	000000000000000000000000b8000000	................
0x40	0e1fba0e00b409cd21b8014ccd215468	........!..L.!Th
0x50	69732070726f6772616d2063616e6e6f	is program canno
0x60	742062652072756e20696e20444f5320	t be run in DOS
0x70	6d6f64652e0d0d0a2400000000000000	mode....$.......
0x80	d97013f69d117da59d117da59d117da5	.p....}...}...}.
0x90	bad7b2a598117da5bad7b0a59c117da5	......}.......}.
0xa0	bad7b1a59c117da5526963689d117da5	......}.Rich..}.
0xb0	0000000000000000504500004c010100	........PE..L...
0xc0	c826485b0000000000000000e0000201	.&H[............
0xd0	0b010c00005004000000000000000000	.....P..........
0xe0	b0260000001000000060040000004000	.&.......`....@.
0xf0	00100000000200000600010000000000	................
0x100	06000100000000000060040000020000	.........`......
0x110	00000000020040810000100000100000	......@.........
0x120	00001000001000000000000010000000	................
0x130	00000000000000000000000000000000	................
0x140	00000000000000000000000000000000	................
0x150	00000000000000000000000000000000	................
0x160	00000000000000000000000000000000	................
0x170	0000000000	.....

0xf80	00000000000000000000000000000000	................
0xf90	00000000000000000000000000000000	................
0xfa0	00000000000000000000000000000000	................
0xfb0	00000000000000000000000000000000	................
0xfc0	00000000000000000000000000000000	................
0xfd0	00000000000000000000000000000000	................
0xfe0	00000000000000000000000000000000	................
0xff0	00000000000000000000000000000000	................
0x1000	558bec83ec4456578b7d08c745bc2bf5	U....DVW.}..E.+.
0x1010	922fc745c0b93b827ec745c47e7e7eff	./.E..;.~.E.~~~.
0x1020	c745c803826e43c745cc7e7e0356c745	.E...nC.E.~~.V.E
0x1030	d0f53b82fdc745d4be7ff73bc745d882	..;...E....;.E..
0x1040	f53382c745dcff9f7d7ec745e07efe07	.3..E...}~.E.~..
0x1050	7bc745e437fdb782c745e83ffbb70bc7	{.E.7....E.?....
0x1060	45ec77f52b82c745f0fdbc7ff7c745f4	E.w.+..E......E.
0x1070	2b8295b1c745f84dbef59bc745fc23bd	+....E.M....E.#.
0x1080	0000b9100000008d75bcf3a566a5a45f	........u...f.._
0x1090	5e8be55dc3f3ba7f9511997a1a64342b	^..].......z.d4+
0x10a0	558bec81ec8405000056578965c48b45	U........VW.e..E
0x10b0	c48945fc8b4dfc81c12b0100002b4dfc	..E..M...+...+M.
0x10c0	898dc0feffffc645df000fb655df85d2	.......E....U...
0x10d0	753a8b45c48985c4feffff8b8dc4feff	u:.E............
0x10e0	ff8b1181f2cc2f874a81facc66f97575	....../.J...f.uu
0x10f0	10c645df018b45c42b85c0feffff8945	..E...E.+......E
0x1100	fc8b4dc483c101894dc4ebbe8b55fc8a	..M.....M....U..
0x1110	82f00200008845dd8b4dfc8b55fc8b42	......E..M..U..B
0x1120	64	d

0xf80	00000000000000000000000000000000	................
0xf90	00000000000000000000000000000000	................
0xfa0	00000000000000000000000000000000	................
0xfb0	00000000000000000000000000000000	................
0xfc0	00000000000000000000000000000000	................
0xfd0	00000000000000000000000000000000	................
0xfe0	00000000000000000000000000000000	................
0xff0	00000000000000000000000000000000	................
0x1000	558bec83ec4456578b7d08c745bc2bf5	U....DVW.}..E.+.
0x1010	922fc745c0b93b827ec745c47e7e7eff	./.E..;.~.E.~~~.
0x1020	c745c803826e43c745cc7e7e0356c745	.E...nC.E.~~.V.E
0x1030	d0f53b82fdc745d4be7ff73bc745d882	..;...E....;.E..
0x1040	f53382c745dcff9f7d7ec745e07efe07	.3..E...}~.E.~..
0x1050	7bc745e437fdb782c745e83ffbb70bc7	{.E.7....E.?....
0x1060	45ec77f52b82c745f0fdbc7ff7c745f4	E.w.+..E......E.
0x1070	2b8295b1c745f84dbef59bc745fc23bd	+....E.M....E.#.
0x1080	0000b9100000008d75bcf3a566a5a45f	........u...f.._
0x1090	5e8be55dc3f3ba7f9511997a1a64342b	^..].......z.d4+
0x10a0	558bec81ec8405000056578965c48b45	U........VW.e..E
0x10b0	c48945fc8b4dfc81c12b0100002b4dfc	..E..M...+...+M.
0x10c0	898dc0feffffc645df000fb655df85d2	.......E....U...
0x10d0	753a8b45c48985c4feffff8b8dc4feff	u:.E............
0x10e0	ff8b1181f2cc2f874a81facc66f97575	....../.J...f.uu
0x10f0	10c645df018b45c42b85c0feffff8945	..E...E.+......E
0x1100	fc8b4dc483c101894dc4ebbe8b55fc8a	..M.....M....U..
0x1110	82f00200008845dd8b4dfc8b55fc8b42	......E..M..U..B
0x1120	64	d

0x0	4d5a4552e8000000005883e8098bc883	MZER.....X......
0x10	c03c8b0003c183c0280308ffe1900000	.<......(.......
0x20	00000000000000000000000000000000	................
0x30	000000000000000000000000b8000000	................
0x40	0e1fba0e00b409cd21b8014ccd215468	........!..L.!Th
0x50	69732070726f6772616d2063616e6e6f	is program canno
0x60	742062652072756e20696e20444f5320	t be run in DOS
0x70	6d6f64652e0d0d0a2400000000000000	mode....$.......
0x80	d97013f69d117da59d117da59d117da5	.p....}...}...}.
0x90	bad7b2a598117da5bad7b0a59c117da5	......}.......}.
0xa0	bad7b1a59c117da5526963689d117da5	......}.Rich..}.
0xb0	0000000000000000504500004c010100	........PE..L...
0xc0	c826485b0000000000000000e0000201	.&H[............
0xd0	0b010c00005004000000000000000000	.....P..........
0xe0	b0260000001000000060040000004000	.&.......`....@.
0xf0	00100000000200000600010000000000	................
0x100	06000100000000000060040000020000	.........`......
0x110	00000000020040810000100000100000	......@.........
0x120	00001000001000000000000010000000	................
0x130	00000000000000000000000000000000	................
0x140	00000000000000000000000000000000	................
0x150	00000000000000000000000000000000	................
0x160	00000000000000000000000000000000	................
0x170	0000000000	.....

0xf80	00000000000000000000000000000000	................
0xf90	00000000000000000000000000000000	................
0xfa0	00000000000000000000000000000000	................
0xfb0	00000000000000000000000000000000	................
0xfc0	00000000000000000000000000000000	................
0xfd0	00000000000000000000000000000000	................
0xfe0	00000000000000000000000000000000	................
0xff0	00000000000000000000000000000000	................
0x1000	558bec83ec4456578b7d08c745bc2bf5	U....DVW.}..E.+.
0x1010	922fc745c0b93b827ec745c47e7e7eff	./.E..;.~.E.~~~.
0x1020	c745c803826e43c745cc7e7e0356c745	.E...nC.E.~~.V.E
0x1030	d0f53b82fdc745d4be7ff73bc745d882	..;...E....;.E..
0x1040	f53382c745dcff9f7d7ec745e07efe07	.3..E...}~.E.~..
0x1050	7bc745e437fdb782c745e83ffbb70bc7	{.E.7....E.?....
0x1060	45ec77f52b82c745f0fdbc7ff7c745f4	E.w.+..E......E.
0x1070	2b8295b1c745f84dbef59bc745fc23bd	+....E.M....E.#.
0x1080	0000b9100000008d75bcf3a566a5a45f	........u...f.._
0x1090	5e8be55dc3f3ba7f9511997a1a64342b	^..].......z.d4+
0x10a0	558bec81ec8405000056578965c48b45	U........VW.e..E
0x10b0	c48945fc8b4dfc81c12b0100002b4dfc	..E..M...+...+M.
0x10c0	898dc0feffffc645df000fb655df85d2	.......E....U...
0x10d0	753a8b45c48985c4feffff8b8dc4feff	u:.E............
0x10e0	ff8b1181f2cc2f874a81facc66f97575	....../.J...f.uu
0x10f0	10c645df018b45c42b85c0feffff8945	..E...E.+......E
0x1100	fc8b4dc483c101894dc4ebbe8b55fc8a	..M.....M....U..
0x1110	82f00200008845dd8b4dfc8b55fc8b42	......E..M..U..B
0x1120	64	d

Metadata

0x0 4d 5a 45 52 e8 00 00 00 00 58 83 e8 09 8b c8 83 c0 3c 8b 00 03 c1 83 c0 28 03 08 ff e1 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 70 13 f6 9d 11 7d a5 9d 11 7d a5 9d 11 7d a5 ba d7 b2 a5 98 11 7d a5 ba d7 b0 a5 9c 11 7d a5 ba d7 b1 a5 9c 11 7d a5 52 69 63 68 9d 11 7d a5 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 01 00 c8 26 48 5b 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0c 00 00 50 04 00 00 00 00 00 00 00 00 00 b0 26 00 00 00 10 00 00 00 60 04 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 60 04 00 00 02 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 MZER.....X.......<......(...............................................!..L.!This program cannot be run in DOS mode....$........p....}...}...}.......}.......}.......}.Rich..}.........PE..L....&H[.................P...........&.......`....@..........................`............@..............................................................................................

0x0	4d5a4552e8000000005883e8098bc883	MZER.....X......
0x10	c03c8b0003c183c0280308ffe1900000	.<......(.......
0x20	00000000000000000000000000000000	................
0x30	000000000000000000000000b8000000	................
0x40	0e1fba0e00b409cd21b8014ccd215468	........!..L.!Th
0x50	69732070726f6772616d2063616e6e6f	is program canno
0x60	742062652072756e20696e20444f5320	t be run in DOS
0x70	6d6f64652e0d0d0a2400000000000000	mode....$.......
0x80	d97013f69d117da59d117da59d117da5	.p....}...}...}.
0x90	bad7b2a598117da5bad7b0a59c117da5	......}.......}.
0xa0	bad7b1a59c117da5526963689d117da5	......}.Rich..}.
0xb0	0000000000000000504500004c010100	........PE..L...
0xc0	c826485b0000000000000000e0000201	.&H[............
0xd0	0b010c00005004000000000000000000	.....P..........
0xe0	b0260000001000000060040000004000	.&.......`....@.
0xf0	00100000000200000600010000000000	................
0x100	06000100000000000060040000020000	.........`......
0x110	00000000020040810000100000100000	......@.........
0x120	00001000001000000000000010000000	................
0x130	00000000000000000000000000000000	................
0x140	00000000000000000000000000000000	................
0x150	00000000000000000000000000000000	................
0x160	00000000000000000000000000000000	................
0x170	0000000000	.....

0xf80	00000000000000000000000000000000	................
0xf90	00000000000000000000000000000000	................
0xfa0	00000000000000000000000000000000	................
0xfb0	00000000000000000000000000000000	................
0xfc0	00000000000000000000000000000000	................
0xfd0	00000000000000000000000000000000	................
0xfe0	00000000000000000000000000000000	................
0xff0	00000000000000000000000000000000	................
0x1000	558bec83ec4456578b7d08c745bc2bf5	U....DVW.}..E.+.
0x1010	922fc745c0b93b827ec745c47e7e7eff	./.E..;.~.E.~~~.
0x1020	c745c803826e43c745cc7e7e0356c745	.E...nC.E.~~.V.E
0x1030	d0f53b82fdc745d4be7ff73bc745d882	..;...E....;.E..
0x1040	f53382c745dcff9f7d7ec745e07efe07	.3..E...}~.E.~..
0x1050	7bc745e437fdb782c745e83ffbb70bc7	{.E.7....E.?....
0x1060	45ec77f52b82c745f0fdbc7ff7c745f4	E.w.+..E......E.
0x1070	2b8295b1c745f84dbef59bc745fc23bd	+....E.M....E.#.
0x1080	0000b9100000008d75bcf3a566a5a45f	........u...f.._
0x1090	5e8be55dc3f3ba7f9511997a1a64342b	^..].......z.d4+
0x10a0	558bec81ec8405000056578965c48b45	U........VW.e..E
0x10b0	c48945fc8b4dfc81c12b0100002b4dfc	..E..M...+...+M.
0x10c0	898dc0feffffc645df000fb655df85d2	.......E....U...
0x10d0	753a8b45c48985c4feffff8b8dc4feff	u:.E............
0x10e0	ff8b1181f2cc2f874a81facc66f97575	....../.J...f.uu
0x10f0	10c645df018b45c42b85c0feffff8945	..E...E.+......E
0x1100	fc8b4dc483c101894dc4ebbe8b55fc8a	..M.....M....U..
0x1110	82f00200008845dd8b4dfc8b55fc8b42	......E..M..U..B
0x1120	64	d

Identity

SHA-256	dc5ced17f0c85fef8a1fa466796a84fb83592eb7c8a86302d9b0cc9e5837c140
Filename	bin.exe
Package	dc5ced17f0c85fef8a1fa466796a84fb83592eb7c8a86302d9b0cc9e5837c140

Origin

Source	harvest
Feed	malwarebazaar
Ecosystem	windows
Domain	abuse.ch

Timeline

First seen	23 Jul 2026 10:38 UTC
First analyzed	23 Jul 2026 23:23 UTC
Last analyzed	23 Jul 2026 23:23 UTC
Last updated	23 Jul 2026 23:23 UTC

Labeling

Label	bad
Label source	harvest
Traits version	4c34e

Not seeing what you expected? Let us know