Malicious
PE Executable
MD5: af1c0398b4ec4d2bed1496c63d0b01a9
Size: 4.77 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | af1c0398b4ec4d2bed1496c63d0b01a9 |
| Sha1 | 66adc37792d614d28fc1b4a26d5a4f5750e103e9 |
| Sha256 | 3140e3c6570fb31aae5f424b2c6f81b7b91e654110bac5c562afdaced7e20848 |
| Sha384 | 5efdc956ae493715fea563132c321a65feb368d8dcdd61b8966a6a05f833237605bc1f3c6b3311f4152748c9256877ec |
| Sha512 | 34d16edf6b07baf00197c0f0711a7f1df05bd47d524d611d0b6f606d818928d631ce0c09dd690f6e3f8532a786b259a42e294822fdec771c0057d81c6c64773f |
| SSDeep | 49152:Sxmk6DiKfriJqVOTZauaKil8KgCInaoDP19fMuWBvJIPMxAmINGEDtxexicqouLi:IabWaYx7sgohT3higkVgohT3higk |
| TLSH | AE265A22959113EDE17FC075898A5E13FB71700913616BEF09D045A3AEA7AF0AE7F342 |
PeID
MASM/TASM - sig4 (h)Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12Private EXE Protector V2.30-V2.3X -> SetiSoft Team
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:rsrc>pe:dll
Shape
pe:exe>pe:rsrc>pe:dll
3 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | PDB Path: t$di |