Suspicious
Suspect

3b9f15072c31dd119ff9dae2bd21a084

Share on LinkedIn
Print
PE Executable
MD5: 3b9f15072c31dd119ff9dae2bd21a084
Size: 15.66 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 3b9f15072c31dd119ff9dae2bd21a084
Sha1 1c731ac38f884ff4e28faf3db19662ed346e1a60
Sha256 2b435e783dd02a969e3ebbef2e88898faa654e72fe48bca19d8328eed051b6ed
Sha384 d23ef822c396fabeb5f381a67d8d7ed79b6de96ccb9c656dd748e151cd0f6f1ae818c21326faf92e4791ff3d3d4ce09b
Sha512 b711aa84c7c27505cd36225fe0aecfa3344aa43a0d8794668a3fbc75035a0986f13fb011ecfb83ead857a42b2036983cd7cd3d76d5858e7ccfc71c5c2b6a992d
SSDeep 196608:rIxbU9Lx0RBLrCgZRfQZGEBzulRP52w5Jg+c/lNoza1jWDO5glNi1jwFfqw4:c+oTf3uyf52w52tro+1QPikl4
TLSH 3BF63345FBA03969F87753308FB389A2DE313C4A036191EB5790756A1DFB1D4DE2A322
Overlay_4d88bf58.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.didat
.fptable
.rsrc
.reloc
Resources
PNG
ID:0065
ID:1033
ID:1033-preview.png
ID:0066
ID:1033
ID:1033-preview.png
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
RT_DIALOG
ID:0000
ID:1033
RT_STRING
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
ID:000D
ID:1033
ID:000E
ID:1033
ID:000F
ID:1033
ID:0010
ID:1033
ID:0011
ID:1033
RT_GROUP_CURSOR4
ID:0064
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_4d88bf58.bin (15180015 bytes)
Info
PDB Path: D:\Projects\WinRAR\SFX\build\sfxrar64\Release\sfxrar.pdb
An error has occurred. This application may no longer respond until reloaded. Reload 🗙