Suspicious
Suspect

aa24497476b2f2ccad19a217e6829c53

Share on LinkedIn
Print
JavaScript
MD5: aa24497476b2f2ccad19a217e6829c53
Size: 894.98 KB
application/javascript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 aa24497476b2f2ccad19a217e6829c53
Sha1 3e977fb4ac2f9ba039bef58c9e665f4a9806c86b
Sha256 a0870e2e08b510fe1cdee16809d0739e8e874be403a32966af3104cd72d01aa9
Sha384 df8823a84bd0038f4831e55f01cec71d6935be3cb3cac28f2c5fc1b4a0f61b2eaf10b740fa5ad8e646a8b6475b2c8d29
Sha512 3deeed17e697eb709f546666a6b33388ffdc5718ffcb2ca61765f74e8d5276d1399b069f3270ca1abf475052e891b472bb06dfc85ee1e88d8a3a1fa4b739eaef
SSDeep 12288:bYEd//LbpeDJ4jfiIaBRtwfESz9pfYbVC3pKEVj4988fwO:bbJIJ4TiIaBYfTz9wC3pKqH8fwO
TLSH AE15291EAFB3C072EE63D5B2F6645221393DB82D173885CB62B0282DE9907C1DAF5355
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
RT_MENU
ID:00D3
ID:1033
RT_DIALOG
ID:00CD
ID:1033
RT_ACCELERATOR
ID:00D4
ID:1033
RT_RCDATA
ID:0000
ID:1033
RT_GROUP_CURSOR4
ID:009F
ID:1033
ID:00A0
ID:1033
ID:00CE
ID:1033
ID:00CF
ID:1033
ID:00D0
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe~T1059.007>pe:rsrc>bin
Shape pe:exe>pe:rsrc>bin
technique3 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙