Suspicious
Suspect

004a855ccee70863174107b3fea03683

Share on LinkedIn
Print
JavaScript
MD5: 004a855ccee70863174107b3fea03683
Size: 10.23 MB
application/javascript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 004a855ccee70863174107b3fea03683
Sha1 9e70535f1fa971cf46a7d35c1e506a3152294173
Sha256 9e9d982bfaf1bef71bc6716c299070d9322fbf64bf56d069b810adf7e5a284a4
Sha384 10882b5192217e42ff76bed6b786096e15fbcd4fcde180b4b5d84afbf8a816f2c708ca344692c703c52b75e1abdc5dff
Sha512 469cc043c1624a7b67d5086774bac1480675dc6da1f3821ceccffbe042dcf11601b7a7700025b8e606915af2320b5e671041542f76c5ea8282f899469cc43bdc
SSDeep 196608:MAEePAg4G/L5IlmHIAoa7Lp1BAG4LQJhdWXYkhpXFzFK7zG:MFkhz5Btjm92hdWXYq7zR
TLSH DDA63345B7C818E8F8A6623DB8D1881B93E278210B75C6DF1BB15D1A2D336E4CE38775
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Overlay_aa53d68a.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0-preview.png
ID:0003
ID:0
ID:0-preview.png
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0-preview.png
ID:0006
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
3 / 3
Path pe:exe~T1059.007>pe:rsrc>img
Shape pe:exe>pe:rsrc>img
technique3 nodes
Path pe:exe~T1059.007>pe:rsrc>bin
Shape pe:exe>pe:rsrc>bin
technique3 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_aa53d68a.bin (9826664 bytes)
Info
PDB Path: t$mn
An error has occurred. This application may no longer respond until reloaded. Reload 🗙