Malicious
Malicious

c9e798462943f33ef81ee2ef2406b83b

PE Executable
MD5: c9e798462943f33ef81ee2ef2406b83b
Size: 111.1 KB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 c9e798462943f33ef81ee2ef2406b83b
Sha1 97c8100c3481d6b5cd4597ae3871ff0cdbb1e5f5
Sha256 42420ed30965b2e8cd0abfe59103f9352cf9e8bb9a1c75d340bf13b2660abda5
Sha384 dd8332acaffb3bab3a141c1736b94c3c7300cc6755eaaf6c216a4e436fc03636d77947c92f7a78df30d7efd87a842892
Sha512 ff2134a540ad2c3e2e5a1b69d4615d20510e050df7dc208c8899d47a082ce6c86d3bbdf0611bd7c4d9fffdb747c52e90dc3ea6450691f4a1148792ea22a5b1da
SSDeep 3072:0XFiAVA5v6if7FMwrrInnjpE6Ux68XEPK8NcN:yFih5v1mwrr0Xt1y8Nc
TLSH E6B37B2172E0C072C097253199F9EBB24A7EF93103B854CBB7E8167A5F603C16A7539B
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:1033
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 1 STICH kept: 0secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
0 / 0
No STICH Path matches the filter.
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙