Deep Malware Analysis of 3fa9ff04979f656ba3975f6ec98efcba | md5: 3fa9ff04979f656ba3975f6ec98efcba | Executable | PE (Portable Executable) | PE File Layout | Win 32 Exe | x86 | PDB Path | AutoIt | CAB:COMPRESSION:LZX | Suspect | Decompiled | PE Memory-Mapped (Dump)

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	3fa9ff04979f656ba3975f6ec98efcba
Sha1	5203a18ead55b15a7cfba434fcdbbd7281de8fe1
Sha256	d9824b3a6894de0606a03a23417f1c7e780ee0b5655f724dbfa455601e13eb8e
Sha384	3b6a22bbbe582b5d7bbd9333369684fca06708976661bf48fb999d587113d7f4c639000d60877ff7c634444aad1a7516
Sha512	37a61dcce6675a97f4f0f3b0951e545d38386455679340805158b295a90cf4619c637e4a8935095453f987a31cb71e7661983c0c884000ce0c24f95ce80a8b6a
SSDeep	24576:2vj0f+jhnPvPy/8tdGag0q3DAu/33bwRu+Yb6mQR5+b4qcNcjXT/:sgWjhX+8tdS0qZ8Eh6mQR56eaXT
TLSH	C165232246E48517E6A40FF408FA42A30531BCE2577A91FF33C69D4C1567BE1663A3FA

PeID

Microsoft Visual C++ 8

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

1 / 1

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential