Malicious
PE Executable
MD5: 398fab919e699bc954eb11db12962965
Size: 4.4 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 398fab919e699bc954eb11db12962965 |
| Sha1 | c01a270056ee845acdec349dc026ac7c9b5ed44b |
| Sha256 | fd240746ebef01cd378b4ffea19cdf139d44960caf41f88dce4bbab8faceb7d7 |
| Sha384 | fac6045845c6b52df03846901560ab270a9d901e4168b3a12f7f5e91d04bcfa4adafd3d72e206feacef7b6016acd4245 |
| Sha512 | 8244803d3ada1c7051794508fccca172e9d3bc2d9154129b3145bac1e961f337ae3c9ca627c3d7465e727c9414ec583bfa4aafc13b6aafa6fb6302f06ffdb9a0 |
| SSDeep | 49152:I2MS/0G4UkGV2JlLJc/fIJdh8Lfbqbvy28:I2AUoJNJUfIHcWjj8 |
| TLSH | 27165B63AAA041F4C1779A34CA674662B631BC5C973133E71D81BA346F3ABD06F7A305 |
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
3 / 3
Path
pe:exe~T1027~T1055>pe:rsrc>img
Shape
pe:exe>pe:rsrc>img
malicious
3 nodes
Path
pe:exe~T1027~T1055>pe:rsrc>bin
Shape
pe:exe>pe:rsrc>bin
malicious
3 nodes
| Name | Value |
|---|---|
| Attribution | |
| Info | PE Detect: PeReader OK (file layout) |
| Info | Authenticode present at 0x3DCE00 size 8120 bytes |
| Info | Overlay extracted: Overlay_d807740c.bin (254336 bytes) |