Deep Malware Analysis of c55d696ea1a03dca903a156a0524c0d2 | md5: c55d696ea1a03dca903a156a0524c0d2 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | PDB Path | AutoIt | CAB:COMPRESSION:LZX | Suspect | Decompiled | PE Memory-Mapped (Dump)

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	c55d696ea1a03dca903a156a0524c0d2
Sha1	a42b59c0a3fd9bbbdbe1cd838ac2cfd5cdafaa1f
Sha256	0593327693af59d16822c8b317949e6675f967be76daffc9ce3c93c030d90640
Sha384	90d61310e83dff6a6a75f435d07e7bdc93698aa489242b254aab5e16fbf7d0f9bd1b55cd9ab8cfc67145f29633af1c94
Sha512	00bebec184cb4cf30bbe4a517869fe7fcb3221056434fe5bffc526b7333c616268c85d5903c9519e0a1b6b3b129be8b33722d62a0e23c9c10d54b4db85ce0c22
SSDeep	49152:jQiXUjjlP4ALF6zdqbt/8r8Ov/qhFLTRf:jQEUdP4ALFedqbhhOnKVf
TLSH	9485236202C098ABD6ED5B3599E640875731BD432F7DE9EF13088C8D0F729D2A93536B

PeID

Microsoft Visual C++ 8.0 (DLL)PeStubOEP v1.x

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential