Malicious
32bcff75191b48284e927db09b0a5fdc
PE Executable
MD5: 32bcff75191b48284e927db09b0a5fdc
Size: 3.52 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
3.52 MB · 3,515,253 B
First seen
2026-08-21 13:45 · 2 months ago
Last seen
2026-08-21 13:45 · 2 months ago
Last analysis
2026-08-21 13:45 · 2 months ago
Hashes
MD5
32bcff75191b48284e927db09b0a5fdc
Sha1
c7a9d5f6b526b726b50fa1e02d46683e0ffefede
Sha256
85ad0b4124b657a35a01d820fff4325f5c4c3ceb60615ad54c4a0ddbcadd590c
Sha384
24a715d91271866daa3882b938c08aed892cd0cb9e6feaef2c743f2ea43fdd47ab82f305e2ae0058f173d42a4f0ad793
Sha512
7100abdeec2a7f23d9ec2b2f273f99008f2a8cadcdfe44f2439cc0184a97491ad3466f3ccec4c677b0d77163f1f8896e1ee34dfd911d39136bf92de91ef535e4
SSDeep
98304:ya7S0srRwqG3Mm1UCjg7AO8jLbrgZCaRsR4:ZXsrRJGcm0QNaWy
TLSH
0FF52381B9D28171E5321CB75A799711E8BCBD603B2A9ECF23D42A5DDC718E0EB31352
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
5 malicious · 38 files
EXE32bcff75191b48284e927db09b0a5fdcT1059.005
Structure
RAROverlay_48aacb67.binT1059.005
EXEBrokerdll.exe
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BIN.Net Resources
BINJZdGPOJFXyRyGvkSXg.FgcAj3i5UGdHrDMhjH
BINVVPEM3Si2oWtammMq3.oTaBNCosIslfm3uQPP
BINHslAmZuJNYuSPWC9MT.OtuhOF2e3FtUHKaF8M
BIN1isS63KQToqHw5pNyJ.2SlHcdUaw3r4JlUZJ6
BINb30siKDSB5p4uqhmtN.73S9OtqOnyLtC2edPK
BIN019n5awL9q9MuQOGNM.3NSrf0cINCWHwrFyC3
VBS0M2YrrdyC3g9VftuNjEJgsyay52vpIVSGf.vbeT1059.005
VBS0M2YrrdyC3g9VftuNjEJgsyay52vpIVSGf.vbe.decoded.vbsT1059.005
BATfypk0CHWXTTtMieyotgRl6BP7.bat
BINResources
BINPNG
BINID:0065
IMGID:1033
IMGID:1033-preview.png
BINID:0066
IMGID:1033
IMGID:1033-preview.png
BINRT_ICON
BINID:0001
BINID:1033
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINID:0006
BINID:1033
BINID:0007
IMGID:1033
IMGID:1033-preview.png
BINRT_DIALOG
BINID:0000
BINID:1033
BINRT_STRING
BINID:0007
BINID:1033
BINID:0008
BINID:1033
BINID:0009
BINID:1033
BINID:000A
BINID:1033
BINID:000B
BINID:1033
BINID:000C
BINID:1033
BINID:000D
BINID:1033
BINID:000E
BINID:1033
BINID:000F
BINID:1033
BINID:0010
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0064
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 6
STICH kept: 3secondary ignored: 3
bin
2img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
3 / 3
Path
pe:exe>arc:rar>pe:exe>pe:rsrc>bin
Shape
pe:exe>arc:rar>pe:exe>pe:rsrc>bin
malicious
5 nodes
Path
pe:exe>arc:rar>pe:exe>bin
Shape
pe:exe>arc:rar>pe:exe>bin
malicious
4 nodes
| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_48aacb67.bin (3194229 bytes) |
| Info | PDB Path: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb |
5 malicious · 38 files
EXE32bcff75191b48284e927db09b0a5fdcT1059.005
Structure
RAROverlay_48aacb67.binT1059.005
EXEBrokerdll.exe
Structure
BINResources
BIN.Net Resources
VBS0M2YrrdyC3g9VftuNjEJgsyay52vpIVSGf.vbeT1059.005
VBS0M2YrrdyC3g9VftuNjEJgsyay52vpIVSGf.vbe.decoded.vbsT1059.005
BATfypk0CHWXTTtMieyotgRl6BP7.bat
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account