Suspicious
Suspect

0040ba2b1eada462974b8edd74730a26

PE Executable
MD5: 0040ba2b1eada462974b8edd74730a26
Size: 557.06 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 0040ba2b1eada462974b8edd74730a26
Sha1 d16177efccfab8df8d9013f6a44ca88a994c6c61
Sha256 05d377c8263e20008aca7bcd0f9b9187d2c70599fdfec334bb6bbfb03e52ebd4
Sha384 f76deaaa34acd349d9926b57f94b045a510be24cdd8aea3a2c4bbd8eb94175a8d54b794c0388359134385efbf73d2d6d
Sha512 3457d09167e1fad5f5b157afb1b63f0bafae669495719e979952c1342b12c0b582b8a8b634ab08d42701efeb7d6a762eca745c4685d3173fde0c3d8cd0d3e5d3
SSDeep 12288:Fmo1yGsaUCcVUFvFjIc6odKSSkFPwXrP7Lr5nglw1ith:woMNNVoSc6o4S1kNglI
TLSH 2DC45E03F6D541E6D01AC87183DA5133E675BC9B8E30BEBF1B945E622E26BC05B2D349
PeID
Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit )
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.tls
_RDATA
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:dll
Shape pe:dll
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.tls
_RDATA
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙