Suspicious
Suspect

944d1a7459e616f7acb2077d930b665c

Share on LinkedIn
Print
PE Executable
MD5: 944d1a7459e616f7acb2077d930b665c
Size: 6.53 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 944d1a7459e616f7acb2077d930b665c
Sha1 5da66e92ab3e6e9884729d835caf33b0b890aaec
Sha256 cd17ee97e06ff23641b1176b9bb2b08cc030f55feb2879b64d5806df9df244eb
Sha384 bf78e82e1c080eaf6eb8d31aa44c37bb09475dd460477f637bfa57314ce2aacac35f05fb84cdc31684a124483795ebd7
Sha512 27a23d4e48c5baffabd37e726dfd7e3981a89ed2ab19ac2289747be5d2dea1b5bd36deb499e593b3d43cf21f6a56ca026c681a9cbcfc960a48630c17032eb5d1
SSDeep 98304:bzaNAEwmFamTRI6CfA/OMAMBMnFMQ6aL4CHhkuWad+QslSb57YzGXWuu31XjUqv:qJwwVCRiM3BEUhkuLTbktv
TLSH 0E663300FA6160B3E9B51C705629AB352E7DBE212F10CE97D3F4279DFE711C09A70A66
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
RT_RCDATA
ID:0C9A
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.didat
.rsrc
.reloc
Resources
PNG
ID:0065
ID:2052
ID:2052-preview.png
ID:0066
ID:2052
ID:2052-preview.png
RT_ICON
ID:0001
ID:2052
ID:0002
ID:2052
ID:0003
ID:2052
ID:0004
ID:2052
ID:0005
ID:2052
ID:0006
ID:2052
ID:0007
ID:2052
ID:2052-preview.png
RT_DIALOG
ID:0000
ID:2052
RT_STRING
ID:0007
ID:2052
ID:0008
ID:2052
ID:0009
ID:2052
ID:000A
ID:2052
ID:000B
ID:2052
ID:000C
ID:2052
ID:000D
ID:2052
ID:000E
ID:2052
ID:000F
ID:2052
ID:0010
ID:2052
RT_GROUP_CURSOR4
ID:0064
ID:2052
RT_MANIFEST
ID:0001
ID:2052
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_c2503ff6.bin (6219362 bytes)
Info
PDB Path: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb
An error has occurred. This application may no longer respond until reloaded. Reload 🗙