Deep Malware Analysis of 1130fe776458c3e4f3779a8f037eaa0b | md5: 1130fe776458c3e4f3779a8f037eaa0b | CAB:COMPRESSION:LZX | Executable | PE (Portable Executable) | PE File Layout | Win 32 Exe | x86 | PDB Path | .Net | PE Memory-Mapped (Dump)

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	1130fe776458c3e4f3779a8f037eaa0b
Sha1	ff8b0cc9c8554eec5e5c65cc1990418ec812b8f2
Sha256	8211468fff3cd6cf858f652b53db995782d573a092d00dac648b863d1b237efd
Sha384	391fd75578003b82a70afe751b9a71a44c1804c7576b1b0d798238e782fe6a4eccc5f4cc72c1494801b7f16fb5681012
Sha512	fc69f785ff8733eb87fca708774a6674e992519b081b77831f18ac346f8ce06d88041293cbadd67244388ac93b03cf95a16dfdae58ea522e67949b6985b191d1
SSDeep	196608:TuKsZTLojKaHaPSN1I0F0ekhDd7phctNO/Ecudbv:eBa6KjICLkhDdfIAEcuZ
TLSH	1176335BF2C6206FFCF9473309F961930725EE710F24959F9A40ACAC29706266EB5372

PeID

Microsoft Visual C++ 8UPolyX 0.3 -> delikon

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 12 STICH kept: 2secondary ignored: 10

bin 9img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:exe>pe:exe>pe:rsrc>bin>pe:exe

Shape pe:exe>pe:exe>pe:exe>pe:rsrc>bin>pe:exe

6 nodes

Path pe:exe>pe:rsrc>scr:vbs>pe:exe>pe:exe>pe:exe

Shape pe:exe>pe:rsrc>scr:vbs>pe:exe>pe:exe>pe:exe

6 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential