Malicious
PE Executable
MD5: 3e0d440f7d4e19e2ae4def046cf05c5f
Size: 4.31 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
4.31 MB · 4,313,384 B
First seen
2026-08-11 19:32 · 2 months ago
Last seen
2026-08-11 19:32 · 2 months ago
Last analysis
2026-09-03 21:05 · one month ago
Hashes
MD5
3e0d440f7d4e19e2ae4def046cf05c5f
Sha1
38e6caeed78d5aeacabdc5397ee077b43395538d
Sha256
6ca1d0647fdc1f2deb80e387b66a4768397ab77a9c7db617203fa605c5c0dc6b
Sha384
d596c1c1501065691af69a22c0d1bb57b6db0abda1d0e6cfc729e2decd78c86732a100ca92b0465e1029f166dd71ad06
Sha512
6328b0a608508636d97c908b4aba8ea9e24dbfbe1f460f46356e1debf1f687274a8d4d7199034be3ee231d2e82dc54c25f859b970d1e2d89f33c4ebae070f677
SSDeep
49152:UAUuLRNbGzMi4lnap3EUvB6GbEd9x7r7m8vlzXksBROap7PlWb8YDTSw2SG3vxnZ:UAUqBln0BdDLRCCG2qGrG1eZJ05Xl
TLSH
5016AE07BD9144A8C4959B3688B712527B28FC0E4B3673E72E91A23A3F777D19E71B40
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft Team
1 malicious · 2 files
EXE3e0d440f7d4e19e2ae4def046cf05c5fT1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_bfa55f43.p7b
BIN(folder)
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll~T1027~T1055>bin
Shape
pe:dll>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x41C7D0 size 2392 bytes |