Deep Malware Analysis of baf37d8f887d4c5a8d2da49feabd08f2 | md5: baf37d8f887d4c5a8d2da49feabd08f2 | Executable | PE (Portable Executable) | PE Memory-Mapped (Dump)

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	baf37d8f887d4c5a8d2da49feabd08f2
Sha1	69d1d2ed3ab3519d348748d141dbc12e9c819215
Sha256	f8cd736a531c65cce00a01fab875cb2cc350b4561e6eaa643fb46d1b62cb3ba7
Sha384	aa2c67c2a7cda3138acddde6b65de67b6618d36f8fb3d3aae95f634c2b433723fbbec4636cee49cc4e5b89f896404e29
Sha512	c61eab77d7dc5401f0ad7e8889919d6a5a75bddc4057be241bab5c2ade07e205e21d99c92b216939c9dcfa1d2e3122fb5ff361546a0a362a2165389ab7b54fbd
SSDeep	786432:ts0spx677BaQJTNYTscewHQbcNW3g5DplEeukmWVY:tVspx6NaoTNE1eANWwR
TLSH	34573303D14EC51CCF5B303951A6F9598BADA862E0385AB7ED8C8E5E47F706702FB924

PeID

ASProtect v1.32Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:exe

Shape pe:exe>pe:exe

2 nodes

Name	Value
Info	PE Detect: PeReader FAIL, AsmResolver Mapped OK
Info	Authenticode present at 0x1B05090 size 11600 bytes
Info	Remap: Mapped -> FileLayout (RAM only) as [Rebuild from dump]_c0c222ec.exe

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential