Suspicious
Suspect

4c120e0fbe3af3f810a6ccf03a801fd1

PE Executable
MD5: 4c120e0fbe3af3f810a6ccf03a801fd1
Size: 401.41 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 4c120e0fbe3af3f810a6ccf03a801fd1
Sha1 6692e8e523d8792a3638aa774a6f2097a6ff8d5c
Sha256 69957c3038fcb6a2cc6ce66813f3e58dcd55fbe3bea739da3ff089502b721e4c
Sha384 107f5aecb5e096a7e70811248e24a555c3f65ece43d8d57136e251fa19d54d83c7e26d60cacb7eb7f232cf719a0c4d9d
Sha512 3b771752495c3d6ed45d84c74563165b73ec95beaaf785542b6578d2f09011c43f5b4f4030ed5613089770abad330dd43f28e99caa164ac37b081716e5ebd383
SSDeep 6144:ehJb46Mq9/ZQg5CaPgHMC7cwREuFAeVWlQ/ppzIQ:ehK6v5ZQg5CdYiEuFom
TLSH 2A841816E79390ACDEF3D67095A6DE72AA71BC741421AC2B43D08A332F63B40753DB16
PeID
Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.dat1
.rdata
.dat2
.rdata2
.data
.rdata3
.dat3
.rdata4
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.dat1
.rdata
.dat2
.rdata2
.data
.rdata3
.dat3
.rdata4
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙