Suspicious
Suspect

a3213201a0567530d1c13fa7e6ef56e0

Share on LinkedIn
Print
PE Executable
MD5: a3213201a0567530d1c13fa7e6ef56e0
Size: 3.5 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 a3213201a0567530d1c13fa7e6ef56e0
Sha1 0207c7f8d08a00a43eb00a047c05659287a61f8e
Sha256 2e8ebef579a52b4c09880ea37b514be583765fefc21b4325bfde5cda70cdd719
Sha384 9d458914ce6fde10484f2517019e0ee689c7675b7761f2e402897632adaaf9fb38d1349ff9bdb2cc6af7746c5a3f253c
Sha512 87d78884dc61a6e9b70464d66b1825cfa3b489d46764f6893afe338382d61057ef62d6ec1e1fad58b279f9bf0618ffebb41e3a89519f96c55d83e6e6ad4bc226
SSDeep 49152:ddZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jx75c:fHvfGfZvZj1/N/z/o7W
TLSH 4FF58CD2A7A600E8E9B7F23CC5568117E7F1B81753709BCF16A44A660F276D12B3E702
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12Private EXE Protector V2.30-V2.3X -> SetiSoft Team
[Authenticode]_594db1e9.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.gfids
.rsrc
.reloc
Resources
AFX_DIALOG_LAYOUT
ID:0067
ID:1033
RT_BITMAP
ID:006C
ID:0
RT_ICON
ID:0001
ID:1033
RT_DIALOG
ID:0067
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0071
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x34C600 size 44848 bytes
Info
PDB Path: C:\MeshAgent\MeshAgent\Release\MeshService64.pdb
An error has occurred. This application may no longer respond until reloaded. Reload 🗙