Deep Malware Analysis of 381e4edd65484ba08d5dc656d027d4fa | md5: 381e4edd65484ba08d5dc656d027d4fa | Executable | PE (Portable Executable) | PE File Layout | SFX 7z | Win 32 Exe | x86 | PDB Path

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	381e4edd65484ba08d5dc656d027d4fa
Sha1	0823dccace0cf9d924a61a63f240a52b754e6306
Sha256	2ae3c4bb100d33d7de57809caf7447d09e8afec83f28d246c3f9d772523f09d4
Sha384	4b7f8b36de9103f96ac7d9d56e63fa31b61012b216a9bc6543d602536f1502bcf286abacf723bcaddd3b5bc68ad1d5ac
Sha512	1c48c97c4054038bb099c77d1147f905562f3d1e8a62c5265d6de7780a6c2ee1833e1fbe39a5b1cf570e1fe626d7ce8aec97eb5a9332cbe54f47bc2fa827a054
SSDeep	98304:vATvXJ8ItMCPacZFehQ4j7FaZ46jwQm/umDspCu:8/+bTFwberDspv
TLSH	940623117781D875E26314324E78F39896BEFA350E660F9F37850AAD9E707C2A731B06

PeID

Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ v6.0 DLL

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 6 STICH kept: 1secondary ignored: 5

bin 4img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>arc:7z>pe:exe>arc:7zsfx

Shape pe:exe>arc:7z>pe:exe>arc:7zsfx

4 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x3A8C70 size 11664 bytes
Info	Overlay extracted: Overlay_e9f5d5be.bin (3072 bytes)
Info	PDB Path: t$di