Suspicious
Suspect

44baa5989d13f79b0be59f17e8db2087

PE Executable
MD5: 44baa5989d13f79b0be59f17e8db2087
Size: 2.28 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 44baa5989d13f79b0be59f17e8db2087
Sha1 97093aa4d8767685430b9d4bed682b9070f68ac0
Sha256 01618f7dfafa7ede2c8d500f9994d2dbee387e5b834d834db5540534cac5f5c4
Sha384 b99c9f812ad85f4a280a1051f76875732c2bbddd0c50f377f7836cae168e9b6b381f38fd3ad9018ff3f02539f4f3451e
Sha512 e7b9a6b2966f7ef27cdc65ca59d3d435793414accced160edcead3c2887d3644f7b226d8c1a04c62af4db9134ccb8275409451d047f9948d7f71fb319cd6ab0f
SSDeep 49152:x2obnRc0XRJHoDt5UunnsBMA8cHVEHP2xyNfI3cTpId/Q/lQTZLlmM:tRJ1JRs9q0M
TLSH 18B5371E80589338F3A9C8EC855E6E9170F937BC8CF291A8111B4AB057667E19FD3B35
PeID
Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: t
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙