Suspicious
Suspect

1130d78a8cf66a9ddb40c71a2a1757d7

PE Executable
MD5: 1130d78a8cf66a9ddb40c71a2a1757d7
Size: 2.91 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 1130d78a8cf66a9ddb40c71a2a1757d7
Sha1 e2b590b10f56d7a713200c1b1419dcd51aa9d231
Sha256 ce61700a601d0ed8aa448c1a9ba8729e8433edaeb9104e80df5244e726930e7f
Sha384 d9ab8e3b52efc05855d3bd814eb7541a812e8feed2d51593dd6a1163e0b27170250e251570434d2934bbe4d79003d882
Sha512 f2e8173eb2de3f3c94c18b64bf11d35eb235f76747140b89bc59f2f8d77aeb3a1669c2b30bff7a2de05a4f37cc3206580ec6f365c1d74dd74fc5cf4b82a2a4c2
SSDeep 49152:cfhoWHqVbThYN4p28ScO335kwabznhI8AxsROcOKXxFFMi5G87UMPoyzuLDsMrEp:c1HAnhYN18mywALhHRgy3MinPoyzaxIJ
TLSH 39D523DAB9F60DB4C436C7728F57E06EB0AE774096A19E47FADCB510AA53484483B331
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.CRT
.,nU
.sxm
.:v-
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.CRT
.,nU
.sxm
.:v-
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙