Suspicious
Suspect

3a64a43baddb5324ea34c689b19d756b

PE Executable
MD5: 3a64a43baddb5324ea34c689b19d756b
Size: 9.79 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 3a64a43baddb5324ea34c689b19d756b
Sha1 c1de532da29f6981720a4209fe9c80592ccb7456
Sha256 22d4777f8a1da4131b37cbc3d5eb60dbae2a1c3db2d658d17a91ef67d3378622
Sha384 aff9318b7b1800d61a8024e366b6ed9b933aea3a089311b9effa08907c2fafdf1265d8700caa0dd9135f40ce8f7543dc
Sha512 680e92582158bd7a4a24317c7f3aa73c371d22c2d6f51dea147f8a70afa6b7068eb8d062279c6caf7e269f02a1f09e81c7b4aec9d3103ba28dda93cc9205c387
SSDeep 49152:OiejA8ka3boGQdJlbbHZ8adUBRvJxVSsRru1N1F2bJ42TRy1xmTL8qQAIR5EtRH1:f8kkC3HCKAJOsNsN1F4V80qEtgMGaG
TLSH BBA65A83F8D60C90D8EDD3B1957A8256AA317C1D0B7923DF56A0BA342F337E15A36B44
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙