Malicious
Malicious

82454d9f0d4b22bc8357285e8397ee3a

PE Executable
MD5: 82454d9f0d4b22bc8357285e8397ee3a
Size: 1.17 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 82454d9f0d4b22bc8357285e8397ee3a
Sha1 f8a6f532ba303705606a91a2416e09e8f4cc7263
Sha256 9c19c3b393c667beccc02574abdeb3e5b4793bb49550daadeab78af2e45cc97f
Sha384 3ab63b68c90f725951a30f4106882341a2c9bc10d84b53724e2f4b5daab332c8c690fb0de14d735b0e51027d46a527e9
Sha512 0cd480a63d1e38d2b414358dbb4f5559cb0d3b5bb1993174089c4ff259ef88b359a392a8dd2ef750e23184e99235eb22296fe81e9a0ac235eeeeaac52ba2189a
SSDeep 24576:u2G/nvxW3WieCLmsz7lHfqBRKlqqNyucQQTES:ubA3jLmsXcMEucpd
TLSH 43455B027E44CE11F0191633C2FF458457B4AC512AA6E72BBEBA376E95123937C1DACB
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
Puu88KnJrp3KQLLKLa874En.bat
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.sdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
.Net Resources
vbg8eLaxDsfHoXNjZv.VLluMVqAeYP90x9WwZ
BKJADYRp70U3soYqPf.ycPvvCGR10nPVANWnj
ysrZEeZ4bXfrtxTRBXu1TlgUg1ug.vbe
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.didat
.rsrc
.reloc
Resources
PNG
ID:0065
ID:1033
ID:1033-preview.png
ID:0066
ID:1033
ID:1033-preview.png
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
RT_DIALOG
ID:0000
ID:1033
RT_STRING
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
ID:000D
ID:1033
ID:000E
ID:1033
ID:000F
ID:1033
ID:0010
ID:1033
RT_GROUP_CURSOR4
ID:0064
ID:1033
RT_MANIFEST
ID:0001
ID:1033
82454d9f0d4b22bc8357285e8397ee3a.decoded.vbs
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
7 / 7
Path pe:exe>scr:vbe>pe:exe>pe:rsrc>bin
Shape pe:exe>scr:vbe>pe:exe>pe:rsrc>bin
malicious 5 nodes
Path pe:exe>scr:vbe>pe:exe>bin
Shape pe:exe>scr:vbe>pe:exe>bin
malicious 4 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_2cc51d3d.bin (849577 bytes)
Info
PDB Path: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb
Puu88KnJrp3KQLLKLa874En.bat
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.sdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
.Net Resources
vbg8eLaxDsfHoXNjZv.VLluMVqAeYP90x9WwZ
BKJADYRp70U3soYqPf.ycPvvCGR10nPVANWnj
ysrZEeZ4bXfrtxTRBXu1TlgUg1ug.vbe
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.didat
.rsrc
.reloc
Resources
PNG
ID:0065
ID:1033
ID:1033-preview.png
ID:0066
ID:1033
ID:1033-preview.png
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
RT_DIALOG
ID:0000
ID:1033
RT_STRING
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
ID:000D
ID:1033
ID:000E
ID:1033
ID:000F
ID:1033
ID:0010
ID:1033
RT_GROUP_CURSOR4
ID:0064
ID:1033
RT_MANIFEST
ID:0001
ID:1033
82454d9f0d4b22bc8357285e8397ee3a.decoded.vbs
Malicious
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙