Deep Malware Analysis of 55d059ddee230743be718bd56698228e | md5: 55d059ddee230743be718bd56698228e | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | PDB Path | AutoIt | CAB:COMPRESSION:LZX | Suspect | Decompiled | PE Memory-Mapped (Dump)

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	55d059ddee230743be718bd56698228e
Sha1	0853cb76e5cea4b7ed9ddc5ea2a3ec18356466b5
Sha256	97d632037760b0b33cf3342ed948d24ea6ae4461214bd3b7c9c385885588b399
Sha384	04b7f242a47ef0038beb99983990c9d55f0f4e117d8d84ba8a192436c7e3d17ca9fdf9ad6f860b5b4989653da27680c7
Sha512	a5bc2dcea6f0a1411928fb77d0de50aaa011bb47a3df296ac7180dbda7596bd4f4bcf2b803b2522c02f8fe437ed3e30c7e84361fa4f460b60aee2e729ffb6fe9
SSDeep	49152:wkTciYwWpAd9zNMAfXZnzXFIjdgvMK5Aj4b6yjCNprzyS3GRwAzlOzo4u:wkTDYFAXF/dV0HjkFjkprz0RTlOzo4
TLSH	ECA5331863FA02ABD4B0477DB0F300876832B9625BB483CF578546EE2FA22D57976747

PeID

Microsoft Visual C++ 8.0 (DLL)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential