Malicious
PE Executable
MD5: 1fa80229c335e4f4bd80e8cdcd2d3c7e
Size: 3.34 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Size
3.34 MB · 3,340,120 B
First seen
2026-07-06 08:01 · 3 months ago
Last seen
2026-07-06 08:01 · 3 months ago
Last analysis
2026-09-03 21:02 · one month ago
Hashes
MD5
1fa80229c335e4f4bd80e8cdcd2d3c7e
Sha1
0fc220f4e436ddff8e3685292b6c331a5e84ae51
Sha256
e562b98bed096f568b0c87445b783f9764e05dffdfee6f52f15778da6e7f41f8
Sha384
0ab839658e52ecf4bf839998f014eead4727f60e9abd6868e747bb3fbd01deea083a6d33985ef8aff9e7bb2e90a0ec07
Sha512
b0c65986dbfab3df667f298dd86e3706d940bec9f2dc8341c3a3da1a693efd4bf90bf8f53bdb3299cb1fd9d0b59724cd088471a885f8a206ecc2d36fa31e04ae
SSDeep
49152:d0juTaKlRuRFf1pilFreBuHAEhnAwl6sRgQ/3xxAcqa+0esxT5WnngCcNvJQ:d+o/AEhnaspPU9HV
TLSH
12F57A87BCA449E9D0AAA33189A38286BB75BC480F3123D72F50B7782F72BD05D75715
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXE1fa80229c335e4f4bd80e8cdcd2d3c7eT1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_8ccc08a6.p7b
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x32EE00 size 2392 bytes |