Suspicious
Suspect

b4793d0beb136c1dca622963194f4879

PE Executable
MD5: b4793d0beb136c1dca622963194f4879
Size: 2.12 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 b4793d0beb136c1dca622963194f4879
Sha1 ba3d13227081b5d5014c965488f38f91e5ae7eba
Sha256 b6f944550a36ae0fd6d6e2edc8d23466badbfc2633672bca9675e67c8ccb42cb
Sha384 c429b9a9c122f6355127ed379353d66da2fa31487dc296c19b9c87c789bae5988d08a177e339aec8e6efe6836048343e
Sha512 056a55a098fab6712d8a2bb832681f4e0d6f72e0fa538ebeb16a3e059ce70ad08eab9881a2b7db582aa389053f7afe0b8d5260f2e4084309b0ede9402f0819e8
SSDeep 49152:OChMaIumcDc78akSCCxoesKQeZBDwqfFNCoD4N:OCMumcDcIatCcrsIDzNC1N
TLSH F6A52352B604A17ACC96C1788F615D7363A734890F12E0EF03A999303F69AF25F7DB25
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙