Suspicious
Suspect

cb94d53e48fafbc93039857f52b756b9

PE Executable
MD5: cb94d53e48fafbc93039857f52b756b9
Size: 1.28 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
1.28 MB · 1,282,560 B
Hashes
MD5 cb94d53e48fafbc93039857f52b756b9 Sha1 a66079b770716bc3e5efb3f6646ab4c0ff49026e Sha256 b958be940679b8934072e7cdcff59e84d112193240e2a7196de5ce6ae65f0634 Sha384 52294914a3a790f4c4e62ae27a8ff1e09faedaa439294f127bb640bcbd3998a26ac1cd5d7c6423b3da86afb4f7bf7e44 Sha512 94ff353a78c4f93b20bc0e1f87753fb8db5f5b6292ed2cb63f90935f853a5fff1f342f1ad93a5b8919741e44a8ec7773a9fa92922e5a87416db36759159392ac SSDeep 24576:JAtCCBGyYCHU9+BHyCd33R4b0O+SvOMJ:aI59etmO TLSH 73557B0154E89FAAE1037D726317C5B098D3FAA1B23500F1CA2EDB4E6E736744B7946B
Detection
PeID
ASProtect v1.2 -> Alexey Solodovnikov (h1)Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
1 file
EXEcb94d53e48fafbc93039857f52b756b9
Structure
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: loader.pdb
1 file
EXEcb94d53e48fafbc93039857f52b756b9
Structure
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙