Suspicious
Suspect

3ee38b944e5c83922f99641846f7db0c

PE Executable
MD5: 3ee38b944e5c83922f99641846f7db0c
Size: 75.26 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 3ee38b944e5c83922f99641846f7db0c
Sha1 440d850ca84790200ad4743f82f23e4393cb95be
Sha256 b4cc5ac328afd0e7eaf16216879046367e083279bfdb831da3a53c8a31df3d1b
Sha384 0e9db75e7fde037084ea41d9e7a958e9953a1ce304664349bba9ad05bf4552b84df3bfc7566de90cadd1f465f831d5f4
Sha512 99d640cf9e5381057388d9cd2dc245b5d5a044240be50018a31dd6c240730da00b761402c9745d8507114234e4db75c0a68c0b40697ef587489e26b7180e38ec
SSDeep 1536:eNbtFEP21BTJL4vEogmNABqzi+TvZPM1tvnQym6y:s3I2XT0RNKcZk1toCy
TLSH 1573C71AE4039075C90B18F249C7E66EFF2C9B5480262D8EE7E80D7DF33A6795C2457A
PeID
UPolyx 0.4 -> delikon
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rdata
.eh_fram
.bss
.idata
.CRT
.tls
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rdata
.eh_fram
.bss
.idata
.CRT
.tls
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙