Deep Malware Analysis of 11f3d9103f62d5fcf77195aba3f56211 | md5: 11f3d9103f62d5fcf77195aba3f56211 | NSIS Installer | Executable | PE (Portable Executable) | PE File Layout | Win 32 Exe | x86

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	11f3d9103f62d5fcf77195aba3f56211
Sha1	e0587585c4a714314cbd4ef63cafe26e68ba1fa5
Sha256	ea87ee70df6dc5e82a5d255ee9278f5d8e60a70e27e409ba7d49848966725bba
Sha384	70484818a3c75d8cb5b43de9d0fe7e452d9eaa2f33e3e971cc9a4305d185a9dac57f6c9416dbda1614e949756a608c64
Sha512	404c4d555a41a07c763cf7279ee8777c9f2f56b74471ac8f884f2ac669641fc93b88b6d9719319ca173a0bc7737199e6b65af6cde8af72b57b90b58dc4edaea0
SSDeep	6144:IMm4CCEufXV8s/Vbwp7RnLv7qhzi0A0bguCBrwHRcDwn5EBA:IMwTRfM1MuI2cDs2
TLSH	7964CF522BA5CC03E39122785556E77D8E566ED07C2ACB2327F47CD7B914B236C2E283

PeID

Installer Nullsoft PiMP Stub v.3.0.x - A.S.L Microsoft Visual C++ v6.0 DLL

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 1secondary ignored: 2

bin 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:dll

Shape pe:exe>pe:dll

2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x4F740 size 4800 bytes