Deep Malware Analysis of 7b9957f3d0d8de82d8d64b5c8ae437e2 | md5: 7b9957f3d0d8de82d8d64b5c8ae437e2 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	7b9957f3d0d8de82d8d64b5c8ae437e2
Sha1	a83aeabe86879e155d507102e1b71c554f39cfbe
Sha256	649695cc337c50bf71bbf43b6c976d7937d6c504332db83e7d9e71213a0ac728
Sha384	c680972f96b753e576871a82a2b6b956f7bcc0e2bc88857ee430d2b0e8edbd138749fc80885cf1815c7baacd2fa3fa94
Sha512	892f2463aebb3bcb5a9d2841875266ac8e3c16db8bed646684d926a841ef10336e19586fabe890cc50ce64f7895d576815073b92a7fb7dd861374c612a676f2a
SSDeep	49152:ScWTgrD4vGfPqeDQ6zcWTgrD4vGfPqeDQ6:ATgbvvTgbv
TLSH	88C5191BE2A344ECC12FD17486639772FA70B85941347E6E1A98DB312F20E605B6EF35

PeID

Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:exe

Shape pe:exe>pe:exe

2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Overlay extracted: Overlay_372ec327.bin (1255424 bytes)