Suspicious
Suspect

b7f307ac60038e66cf8951bba64414d4

Share on LinkedIn
Print
PE Executable
MD5: b7f307ac60038e66cf8951bba64414d4
Size: 2.47 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 b7f307ac60038e66cf8951bba64414d4
Sha1 9577ed72881b5b4b720737d628bcfc1bb837d132
Sha256 8ada7f5b671c1b3fad199826203eb4e5dbd1c6a8cf1791100651ac24358daef4
Sha384 3c4caa82e2eb81a376ac3f11a08d6cbf86ee3aaeff4f036f08608f92bc5c9ca5d1311263fd8b91c4e6d2eb5e75b517ab
Sha512 fc8aaaf86c730e69b5853089b5c697f367ea8270a638618e4a124e5aa286600cb1a08279f4bc855a0cc3d47200144a5a622800edd4693f164d11d404303b2c57
SSDeep 49152:AToifr9FXth5yR/vTrm4uW0+LH+qvLQGj9HJ7I7Pe8gmLi7SrH:ABrVov+4uvSH+qUCBJ7Ce0ESrH
TLSH 3CB52321B7C29073E57A1935AF38A719983C2C611FA6D5CBA3C02E5FAA305C1DB34327
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
[Authenticode]_90949110.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
RT_GROUP_CURSOR4
ID:0000
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Overlay_090f309a.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.didat
.fptable
.rsrc
.reloc
Resources
PNG
ID:0065
ID:1033
ID:1033-preview.png
ID:0066
ID:1033
ID:1033-preview.png
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
RT_DIALOG
ID:0000
ID:1033
RT_STRING
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
ID:000D
ID:1033
ID:000E
ID:1033
ID:000F
ID:1033
ID:0010
ID:1033
ID:0011
ID:1033
RT_GROUP_CURSOR4
ID:0064
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

6 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 4img 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_53d8b508.bin (2081179 bytes)
Info
PDB Path: D:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb
An error has occurred. This application may no longer respond until reloaded. Reload 🗙