Malicious
PE Executable
MD5: 1bd88bbb0c82349303aa60c470c8b51e
Size: 3.41 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 1bd88bbb0c82349303aa60c470c8b51e |
| Sha1 | 55888979b9436e79d41aeb0b763de01ed99b85db |
| Sha256 | fd669e1388907d25b8039b5ae22804a6b77a96d139c8f8bbff50c15c9968bfa2 |
| Sha384 | 78724a6e18e9bc4d89ae29d09af83a40779432ef4dc370fa3b8760eb9d5096323b0ff30992302556549fe9f3df14c482 |
| Sha512 | b78c333246b63419bec60237782b7a32a0b1dfd1fa5ee8f27d83f11dceb14685cef39309e2496e4408e488b30df73f02be8bdc2a21c9f45a48b7bd1ef3584807 |
| SSDeep | 98304:Ubrsyw9Am+MZm8Ib2v8kViYY/jq9uvScoCJVQ2:U/sd9F+qVIyv8kV/bujDQ2 |
| TLSH | CFF5EF027E44CA12F0191233C2FF494447B9AC112AA6E72B7DB9336D55223D3BE5DADB |
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
Malicious
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
8 / 8
Path
pe:exe>scr:vbs>pe:exe>pe:rsrc>bin
Shape
pe:exe>scr:vbs>pe:exe>pe:rsrc>bin
malicious
5 nodes
Path
pe:exe>scr:vbs>pe:exe>bin
Shape
pe:exe>scr:vbs>pe:exe>bin
malicious
4 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Overlay extracted: Overlay_6ea76463.bin (3092685 bytes) |
| Info | PDB Path: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb |