Suspicious
Suspect

e34755b68490cf2b1e876da6c6d0135f

Share on LinkedIn
Print
PE Executable
MD5: e34755b68490cf2b1e876da6c6d0135f
Size: 2.2 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 e34755b68490cf2b1e876da6c6d0135f
Sha1 b0c782b109d2cba64ae8a9e5cd8a2fe22145069b
Sha256 2d94c9ec16c386af1665b3eeaa16e9cff8478136f1f5c001e00a4e35dd550bf9
Sha384 16afe8ce8f32e7bbda287fec31eb3926e53e853c61ff590a2aed1f242f2b16372772f20966ea24676b74e4bd06ee75fc
Sha512 26d65a1d425c93f65f8883f975a16a78b5a36ea3d663f9a4498b92ef8d6bc2a32de21ae01b57aedb5e52a3094e98229a8ed10647b063ea79c7c82042d6774bbb
SSDeep 49152:06xcx0yWje7pKUoFFLDb+9TwusxyQjyKg0Po1ReMXiS:06ILIUwrAsuLR0mReWF
TLSH C3A5121DD7F405FDE0B3D174CA974916EB767C4A47B1E6CF03A0A9A61E232908D39B22
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Unity.Interception.Properties.Resources.resources
Unity.Interception.package.snk
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
ILRepack.List
ILRepack.List
[Authenticode]_1d185069.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.didat
.fptable
.rsrc
.reloc
Resources
PNG
ID:0065
ID:1033
ID:1033-preview.png
ID:0066
ID:1033
ID:1033-preview.png
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
RT_DIALOG
ID:0000
ID:1033
RT_STRING
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
ID:000D
ID:1033
ID:000E
ID:1033
ID:000F
ID:1033
ID:0010
ID:1033
ID:0011
ID:1033
RT_GROUP_CURSOR4
ID:0064
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

7 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 6img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_5bb77c54.bin (1724172 bytes)
Info
PDB Path: D:\Projects\WinRAR\SFX\build\sfxrar64\Release\sfxrar.pdb
An error has occurred. This application may no longer respond until reloaded. Reload 🗙