Suspicious
Suspect

aa24497476b2f2ccad19a217e6829c53

JavaScript
MD5: aa24497476b2f2ccad19a217e6829c53
Size: 894.98 KB
application/javascript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 aa24497476b2f2ccad19a217e6829c53
Sha1 3e977fb4ac2f9ba039bef58c9e665f4a9806c86b
Sha256 a0870e2e08b510fe1cdee16809d0739e8e874be403a32966af3104cd72d01aa9
Sha384 df8823a84bd0038f4831e55f01cec71d6935be3cb3cac28f2c5fc1b4a0f61b2eaf10b740fa5ad8e646a8b6475b2c8d29
Sha512 3deeed17e697eb709f546666a6b33388ffdc5718ffcb2ca61765f74e8d5276d1399b069f3270ca1abf475052e891b472bb06dfc85ee1e88d8a3a1fa4b739eaef
SSDeep 12288:bYEd//LbpeDJ4jfiIaBRtwfESz9pfYbVC3pKEVj4988fwO:bbJIJ4TiIaBYfTz9wC3pKqH8fwO
TLSH AE15291EAFB3C072EE63D5B2F6645221393DB82D173885CB62B0282DE9907C1DAF5355
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
RT_MENU
ID:00D3
ID:1033
RT_DIALOG
ID:00CD
ID:1033
RT_ACCELERATOR
ID:00D4
ID:1033
RT_RCDATA
ID:0000
ID:1033
RT_GROUP_CURSOR4
ID:009F
ID:1033
ID:00A0
ID:1033
ID:00CE
ID:1033
ID:00CF
ID:1033
ID:00D0
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe~T1059.007>pe:rsrc>bin
Shape pe:exe>pe:rsrc>bin
technique3 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
RT_MENU
ID:00D3
ID:1033
RT_DIALOG
ID:00CD
ID:1033
RT_ACCELERATOR
ID:00D4
ID:1033
RT_RCDATA
ID:0000
ID:1033
RT_GROUP_CURSOR4
ID:009F
ID:1033
ID:00A0
ID:1033
ID:00CE
ID:1033
ID:00CF
ID:1033
ID:00D0
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙