Suspicious
Suspect

Overlay_3704eac0.bin

PE Executable
MD5: 3704eac0b8cda9325754ff1d59df1fed
Size: 121.34 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 3704eac0b8cda9325754ff1d59df1fed
Sha1 b671f3daf5c0c11422cf0194b81e04e0addd8afe
Sha256 b009ba092e8eb42ec86006bef2eaba582194b9acea9d2b06d72fb68206c7c50e
Sha384 6e980c2f52259b635caeba974ed0f83af808217f69d76bda7702b1bdf67887cacbad39200e82337e0d533ed847c8e8ed
Sha512 147a7c0581d97fa4f0fd9d2ebb39fdf2363015a6bbd189cf744d12aefead2449cabf1c619ba84bbcd3758d86e4fb8da910d0b7c4485dfbe63e69087413c6e765
SSDeep 3072:rgNjz2M8NTGiFlVT4+amIlaAXR1RBdKJ:rgNjCDTNLV8jmSaA3Q
TLSH 5EC33C077295427FD82BC239C9A34B63D7F9B8481A70670D5B64079A6F17394AE3CB38
PeID
Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit )
Overlay_ba5a1f8d.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0002
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_ba5a1f8d.bin (4096 bytes)
Overlay_ba5a1f8d.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0002
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙