Suspicious
Suspect

ca04ae8e918316722c39dab7f9fa28d5

Share on LinkedIn
Print
7Zip SFX Archive
MD5: ca04ae8e918316722c39dab7f9fa28d5
Size: 415.74 KB
application/octet-stream

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 ca04ae8e918316722c39dab7f9fa28d5
Sha1 9fdcef70311a75623f2907bc3cc100a2c2e35f55
Sha256 73ef49ae844b024dc84215f6a00d22e0cf9f19c244003100fdafa76ce55c3b82
Sha384 5c17f49b54576689d8b1dc49c8b79261b45c6b86f044a4e4e5184bbf409381c55c44a813e702ddee1edbc43b778cce9d
Sha512 7d62def110689106b36d6b4f334626e1376cd8f1acd50e357515b889e39f938e95592899e7b2cf1371b606cd8d3ffef45554b2004ac1b3869486a7a1ff108ce3
SSDeep 6144:Q0Q1WoBFzJG34g9BUxQlthVtaeFYMcHQhu2mzt60muk7bOzD0ecfJLUv:JQ1WcJGoQBtl/eeFiEGkmzD0ec
TLSH 5B943BA6F67885B0D0B7D079C9E25796FE723188173097CB12858B792E17BF9893D320
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
RT_GROUP_CURSOR4
ID:0065
ID:1033
RT_VERSION
ID:0001
ID:1033
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:dll>arc:7zsfx
Shape pe:dll>arc:7zsfx
2 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙