Suspicious
Suspect

41696b34a7370149fc1da385f65fb2dd

PE Executable
MD5: 41696b34a7370149fc1da385f65fb2dd
Size: 1.02 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 41696b34a7370149fc1da385f65fb2dd
Sha1 07f8ab2d991e0921c3a05b188a0ee082758694ef
Sha256 5e47989ec2b85caab9939ca63da53a25ee6eb9785312703355ea35138aae7e0e
Sha384 92dd24e0ebda3349b9fa1fff556a8c15c27d701128a39a6affe229f953c42883d17faacb3d2df200fc03ee6b848b4dee
Sha512 019ddf0ecad24352af2aa6717fad5342c69af56c8030e8c9d76a038691b79fedc416ce9e4d0b43df75ae9359ebf8b5bb6ca7e011e34f73b7ed4291a283bf68e8
SSDeep 12288:Ft1ZFeolW0CrUUOAMna63vh938BAbTYzr1vR5aFlv3:rDk50CrUUOjaG93lb81vXglv3
TLSH 03251250AAB643CBE2B64D7899224F701B377C829AD42D0F1740F9BF1C16395DF29EA1
Overlay_6be41075.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.migwt
.lsdwr
.olpe
.llf
.rbt
.poo
.gysg
.tcg
.cty
.vvwhbyb
.compot
Resources
RT_RCDATA
ID:0065
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
RT_MANIFEST
ID:0001
ID:1033
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 1secondary ignored: 2
bin 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe>pe:rsrc>pe:dll
Shape pe:exe>pe:rsrc>pe:dll
3 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_6be41075.bin (74 bytes)
Overlay_6be41075.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.migwt
.lsdwr
.olpe
.llf
.rbt
.poo
.gysg
.tcg
.cty
.vvwhbyb
.compot
Resources
RT_RCDATA
ID:0065
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙