hah5.exe

The executable contains unknown PE section names indicative of a packer (could be a false positive) (1 event)

section

.gfids

The file contains an unknown PE resource name possibly indicative of a packer (2 events)

resource name	AFX_DIALOG_LAYOUT
resource name	RT_RIBBON_XML

The binary likely contains encrypted or compressed data indicative of a packer (2 events)

section	{u'size_of_data': u'0x00015a00', u'virtual_address': u'0x00027000', u'entropy': 7.9225921885203885, u'name': u'.data', u'virtual_size': u'0x00016b60'}				entropy	7.92259218852				description	A section with a high entropy has been found
entropy	0.35020242915				description	Overall entropy of this PE file is high

File has been identified by 13 AntiVirus engines on VirusTotal as malicious (13 events)

Elastic	malicious (high confidence)
Cybereason	malicious.c2101c
APEX	Malicious
Paloalto	generic.ml
Kaspersky	UDS:DangerousObject.Multi.Generic
Avast	FileRepMetagen [Malware]
Rising	Malware.Undefined!8.C (CLOUD)
FireEye	Generic.mg.bb5ef523f0bf2437
Sophos	ML/PE-A
Webroot	W32.Trojan.Gen
AegisLab	Trojan.Win32.Dapato.b!c
AVG	FileRepMetagen [Malware]
CrowdStrike	win/malicious_confidence_90% (W)