04e3a5e74513b7cc7eb540940299806e

PE Executable

MD5: 04e3a5e74513b7cc7eb540940299806e

Size: 17.84 MB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	04e3a5e74513b7cc7eb540940299806e
Sha1	002048e6ec82b326fe6bae4b6bac64de8e545026
Sha256	5acbb6ee89b38eb2abf81a2b2349a4c97e7c2dd23ad4daf8d5b5b113176fef53
Sha384	62eb446e862f1f142f24cd330f7704acd7510b14cc74e1ad6f080dce106e2ead378ebe59371b30a5219fd675190b0481
Sha512	dd22c723e205b8244ecc9f53d0be08f3e712cb94e9c3b4c70747356e483481cdfd2a04c42d9c77b66759b954ce0734e343ee54d3c17c60c345693bde2358e04d
SSDeep	393216:Oz7+P6gzjM/5IqMDF35s6pLNPX29pgbmjz0diOgJCJLouDW4iV:U7cT1/NpI9ymjz0VvHK4iV
TLSH	A90733057991C6D4F7C272B9261C62F3837A4F6A183AD9FF24B072611BF5BC7D1120AA

PeID

Microsoft Visual C++ 6.0 - 8.0Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLMicrosoft Visual C++ v7.0UPolyX 0.3 -> delikon

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 5 STICH kept: 1secondary ignored: 4

bin 3img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>arc:7zsfx

Shape pe:exe>arc:7zsfx

2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Overlay extracted: Overlay_9333509f.bin (17339167 bytes)

No malware configuration was found at this point.

You must be signed in to view YARA rules.