Deep Malware Analysis of c63d52054c33f46ec855c166eeed30f8 | md5: c63d52054c33f46ec855c166eeed30f8 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | PDB Path | AutoIt | CAB:COMPRESSION:LZX | Suspect | Decompiled | PE Memory-Mapped (Dump)

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	c63d52054c33f46ec855c166eeed30f8
Sha1	4966c56c92429c0e11b67e30799cd5618e6fd94a
Sha256	a2797646777e379eb72fdd6f81ed1988216e191d7cee04e5b022d77d796886ea
Sha384	ab2856adf5ad209937f880a1cbcd3fde2cc833b7eed1f62c190ea393c82cf83c2e707cb29595e480b21a4a2948e1fd8d
Sha512	57747c4ce68641e59d2f33f74de6b6d408cdb120955c91c059d236adf2aa0d3b5017296a8ec5b9fce0011fd65cd9a165e40b2e8554c8748bb359e6575c33c7a9
SSDeep	49152:jsQi8s7goiIWd8kWTq4QDa1PRl6D18joSkyV23f:jsF8bDdB48qPRC18jxKf
TLSH	9A85234363E286E5F4B26B74A8F641939B337D825A77C58F1290FAD90F76085E630B13

PeID

Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential