Suspicious
Suspect

d873411d0b14b1467892f084265056e5

PE Executable
MD5: d873411d0b14b1467892f084265056e5
Size: 559.1 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 d873411d0b14b1467892f084265056e5
Sha1 e1ea176c60d038c00f2bc4b7dde8962707d0eaa9
Sha256 2af80e4598932925bcfb97b5e234d97e671a3ca21a47aae61656dde3a24caf65
Sha384 d95751f3ba5f99962f6476268a11940dc41025ab99b7bbf101ae6d33f3a28526ed51bd600621a4bb7e4763c3c1597b02
Sha512 2081651de7f86d803be52be6b1da4086cf22654bfff1e2ecffe7cc506cdc95b22a4381549efb14666a6684fdf7532ee4bb2d1bb9182106f4192c741bf0586fea
SSDeep 6144:Dbo61SekhXMTQaUqVFU2Z/GNk1BueDjaEF9HFO4n8DgAKYVCJcdIWtR:SCZuNk1BJHd+v/fUyXt
TLSH E4C47C58F6A413F9E17AC275CD839513F7B2B8481370A9DF03E099762F232A15A3E761
PeID
MASM/TASM - sig4 (h)Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.data2
.pvmut
.fptable
.rsrc
.reloc
Resources
RT_RCDATA
ID:0065
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
RT_MANIFEST
ID:0001
ID:1033
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe>pe:rsrc>pe:dll
Shape pe:exe>pe:rsrc>pe:dll
3 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.data2
.pvmut
.fptable
.rsrc
.reloc
Resources
RT_RCDATA
ID:0065
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙