Suspicious
Suspect

49caf47dd348082411c3ca7cabfc49f9

PE Executable
MD5: 49caf47dd348082411c3ca7cabfc49f9
Size: 1.13 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
1.13 MB · 1,129,984 B
First seen
2026-10-16 01:00 · 7 days ago
Last seen
2026-10-16 01:00 · 7 days ago
Last analysis
2026-10-16 01:00 · 7 days ago
Hashes
MD5 49caf47dd348082411c3ca7cabfc49f9 Sha1 6104de77d08b93425640f6be1a101a3aecff9943 Sha256 5fe4d4fff5da2c58f4e4450d67f5ab325b78beba7cd294169e9e8af4ef429f6f Sha384 f4b50df556674d747a000d5eb967b794dbe4b4be06a3ea730def9d37ce2e33b5f092348f36149427b1b04e0633262da4 Sha512 8e4229075586085c3291bc24420661c9aec2586e1a765528c770c062388c6f17979158d12b5b375c7c10573eb388732f52df9815d6d19192602032d62e300a79 SSDeep 12288:f55606w1G1UiQQTf4saLsKsHxHfM36KtHQwpWyYq8QrIttY3reTjD06MlNyZFMhz:fa0R0RrozYxHjKVQwFrVIH06iyZFMN TLSH 06357D07E65181E8C05DC474C34B9673AA71BCCE0A35B5EF0BD097212EA9FE16B2EB15
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.tls
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.tls
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙