Malicious
PE Executable
MD5: 41d17a7523b9fcaac5d05863e6c5835a
Size: 5.1 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 41d17a7523b9fcaac5d05863e6c5835a |
| Sha1 | 26986a15cad5c3b1a0447e53b24c192ea041b4a8 |
| Sha256 | d27e33a6766532e8a826517790932a3c90e8c12fc6cbe96d19d398eb0e2f06f5 |
| Sha384 | a46201788ccc9e1dcea9f9f5cc09968c51a29d0d4bd5468410b8c2a50e888da6c90a433d63d509eec6ad7de7a4a26768 |
| Sha512 | 8a0e8da0086816aa2c72df4f46483ddcca1d1717baf244e68ab5f4aae7ca267e78772b0f0c7eca51ad84ee2b235a3200714d8ee458df4e31aca76c1a6c1fcd1a |
| SSDeep | 49152:HFC4pTm1g6wLJ5/2oPBW8hP5Zd7nfLDWAkiTPm1n/OpLtkFh5B76V0bECNPNyMJ0:HFXJ5/2XuPTtnmAkiTMBmqXSN |
| TLSH | D9369C07B9A000E9C4AAD275C9B25542FB72BC190B3667D71FA0B6792F337E19D39B10 |
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12Private EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
3 / 3
Path
pe:exe~T1027~T1055>pe:rsrc>img
Shape
pe:exe>pe:rsrc>img
malicious
3 nodes
Path
pe:exe~T1027~T1055>pe:rsrc>bin
Shape
pe:exe>pe:rsrc>bin
malicious
3 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Authenticode present at 0x4DC400 size 2408 bytes |
| Info | Overlay extracted: Overlay_077b782d.bin (1679 bytes) |
| Attribution | |