Malicious
PE Executable
MD5: 16938fc639be74a173fa2d0423399b4a
Size: 3.88 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
3.88 MB · 3,876,608 B
First seen
2026-08-11 11:46 · 2 months ago
Last seen
2026-08-11 11:46 · 2 months ago
Last analysis
2026-09-03 21:02 · one month ago
Hashes
MD5
16938fc639be74a173fa2d0423399b4a
Sha1
e4b57acf3e9a5edcfabf2408cdfc559a8c94c752
Sha256
e0387162a835f5357a9ea8676cf34b15450b1f93647d9ec98d1fb5ddb12e67ff
Sha384
9ee7a9a7c81782b116902f0ebdfb7c2a67fbe660b07243b30609f8550fe20e9352474da90d8a127326ee12bb7c431ef7
Sha512
554b7ad45661aeb5fd7dfeea5161282f946fc6f310e3d5068466763d8192801c657349401667b3ce197e747f45889aa663c270dfd0858b9af9cabc9ffcb575a9
SSDeep
98304:OKJGwC+o4RVewe4FAJhUYpV3/lOXvaZCX:OAER4XeweQA3UYj3NO/
TLSH
34068D17ADD248F6D05AA23689A75242773CFC0A1B3267C72E10B77A2FB7BE05935314
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft Team
1 malicious · 2 files
EXE16938fc639be74a173fa2d0423399b4aT1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_fb585207.p7b
BIN(folder)
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll~T1027~T1055>bin
Shape
pe:dll>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x3B1D90 size 2416 bytes |