Suspicious
Suspect

7a4c389ff07e12379f0472b0b532ee50

Share on LinkedIn
Print
PE Executable
MD5: 7a4c389ff07e12379f0472b0b532ee50
Size: 17.71 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 7a4c389ff07e12379f0472b0b532ee50
Sha1 fd952f79b2f7a75daca40112138dbb2eb6634fca
Sha256 076b561bddf88c1482feefb2cbbc11a82b7829528988fd246a6e4a245eb48e73
Sha384 5a3bbaa16b0db8eec1fef541b88bcac80c42cc3db3343e4eabe10aade2d927308efb14d63ae7ed57d956baad2aa628c5
Sha512 9dbee2f64f45b6c4cf04c746288a73c114917161a4ac5565478ccd22f20aacee081cabbd87569ac66ac0b4017566a85cd7b6fa7110c176b7c7d2e5798ae656f8
SSDeep 393216:5rj9PQ7rgC0ZrJyzy2msJsv6tWKFdu9CzqU49J8UD9:rkrB/sUaJv9
TLSH 3307AE21A605817ED9A151B05639636F5628AE3B4BB405E3D3C83E2A2F305C36F37F5B
PeID
HQR data fileMicrosoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikonVC8 -> Microsoft Corporation
[Authenticode]_4fbddedc.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
_RDATA
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
RT_GROUP_CURSOR4
ID:0064
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x10E0400 size 13096 bytes
Info
PDB Path: C:\actions-runner2\_work\rgsupv-agent\rgsupv-agent\build\rgsupv-release\bin\rgsupv.pdb
An error has occurred. This application may no longer respond until reloaded. Reload 🗙