Malicious
PE Executable
MD5: 376fe0127f65ba61f93fb05d4de8f1e2
Size: 1.83 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 376fe0127f65ba61f93fb05d4de8f1e2 |
| Sha1 | 2eb4fdfa834a2987abdeb838a8b90e5b23a4bc4b |
| Sha256 | c98b05ad366e13c1f182a11fbc7458a521ecf073ccbf8df06676abcc4c8ae2ed |
| Sha384 | a806d546e62f61fb0a0a3f236c5e0f3016671adfcb5e4d4371034dc2e8876f0163b18c8c79172fbe769b4aae575bb3e5 |
| Sha512 | 97a113a1bb8bc716fa476ba655b25cf53bde12d487d344fdc84076e0fe2b170c54715fcc4c6838052547e4bcc727a806b41c516639ca57808dd605ade60692a5 |
| SSDeep | 24576:u2G/nvxW3WieCVjgoBG3T3awYORcyiLfdFfwAMUiVTjFmc//mQSZ30akFTpRAmaK:ubA3j1gla1HffHMH/mQS9CpRASj |
| TLSH | E585AE027E84CA12F0191633C2FF850487F4AC91AAA6E72B7EB9376D55113937D1DACB |
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
Malicious
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
7 / 7
Path
pe:exe>scr:vbe>pe:exe>pe:rsrc>bin
Shape
pe:exe>scr:vbe>pe:exe>pe:rsrc>bin
malicious
5 nodes
Path
pe:exe>scr:vbe>pe:exe>bin
Shape
pe:exe>scr:vbe>pe:exe>bin
malicious
4 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Overlay extracted: Overlay_794cde7f.bin (1514680 bytes) |
| Info | PDB Path: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb |