Suspicious
Suspect

1af04049a044c317aa0ace6091722517

PE Executable
MD5: 1af04049a044c317aa0ace6091722517
Size: 790.53 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 1af04049a044c317aa0ace6091722517
Sha1 555a8c12e9790426174c1b777cef3907d01fc265
Sha256 83d2b430e9745e769fa62a917ab47dfcebb159f8b374dc7226ea62b88ebc3687
Sha384 9e34499319a2ae8333763790ff827152d619cfc4d2b77c4c35d8b76356688487c7264b3db47fcaa9edbb44aa7a3dc266
Sha512 9a50328beae79693602fef627905185f0bae1bd82a21db7b2e484a34900a095125fcd7da7f9e7f66eafe63d1bcb9d27724a1425dc22bc89d2475e54445af735e
SSDeep 3072:NyvZY66hgREK9xbHtEG0ASPZHkyhwWPwc/iAxxdQPNVplZAj:zhqjxDtEG0bBHkKtxxdQzpbg
TLSH 67F45C0A2846C0FCC05E6A3ECDF5A27171507626DDE3ED591E68ED037EB443686EE3A1
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.Text
.Data
.Rdata
.pdata
.xdata
.bss
.idata
.tls
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.Text
.Data
.Rdata
.pdata
.xdata
.bss
.idata
.tls
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙