Malicious
PE Executable
MD5: 204936dc11b78d2a83682f88f69608a9
Size: 1.9 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 204936dc11b78d2a83682f88f69608a9 |
| Sha1 | 8c6320f8b1b19c260e8ff5f2d1c4637c11c3efe5 |
| Sha256 | 676791821fa7a173d3cfdf11087f9bc4078dc784b837158e89739728d419f745 |
| Sha384 | eec46d81440efa8517e61a8772aa1b27dbda9b11a9837490db445fbf8b9c8aa68cfc78fbbb8f3a2afefc32e639e75111 |
| Sha512 | fa39109f3675d7af176a6c221bd72761b5ef0eb67906ca0426060a57be288782dfb32cdf57395e84222c9e97345123199d9d5869304751a3cc01c45b2ce4a074 |
| SSDeep | 24576:U2G/nvxW3Ww0tMMIcb25txW+3OnnfY1At/fXcUQ73keWJj07ywAU2kopx5k1eWFZ:UbA305DIxUfNk7gjdkoLYJnUi |
| TLSH | F795AE02BE44CE12F0191633C2EF491487B4AC116BA6E71B7EBA376E55123977C1DACB |
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
Malicious
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
7 / 7
Path
pe:exe>scr:vbe>pe:exe>pe:rsrc>bin
Shape
pe:exe>scr:vbe>pe:exe>pe:rsrc>bin
malicious
5 nodes
Path
pe:exe>scr:vbe>pe:exe>bin
Shape
pe:exe>scr:vbe>pe:exe>bin
malicious
4 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Overlay extracted: Overlay_1a075eb4.bin (1581694 bytes) |
| Info | PDB Path: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb |