Deep Malware Analysis of e0b6ab4c98284b7e6818d3331011d945 | md5: e0b6ab4c98284b7e6818d3331011d945 | Executable | PE (Portable Executable) | PE File Layout | SFX 7z | Win 32 Exe | x86 | PDB Path | Archive 7z non extractible (chiffrée, corrompue ou vide)

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	e0b6ab4c98284b7e6818d3331011d945
Sha1	6ff63b2609deddcd368153b0e60878de847e3085
Sha256	396e39ec41bc100b18c97aef2f7c03c371311b88fb0b7be2e5c06c4402ed698f
Sha384	d3b77b53bfc72c61d5c97a3901211bec1ec27a52826d174d2e4a96e1818e4636dc320b1c0c52fe1dffdfe97c95b92020
Sha512	cc83185ad8952633eedd00cbbd0014a0c0cffebd6105bc00bd9217f2bfaa4ed16557d084399127e3872e469d5613fa3ba98442048e11e7a3d0e67f35e3824484
SSDeep	98304:cgAztwh3gh3XyFaN+QiOy/ggJl3w0PLTL+7:cZtwRghrN+Qil/geLn+7
TLSH	6A0622B1768D0832E9A121321B61AA887C7F7B53BB2D728F338DF54A5D71981C653F12

PeID

Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ v6.0 DLL

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 6 STICH kept: 1secondary ignored: 5

bin 4img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>arc:7z>pe:exe>arc:7zsfx

Shape pe:exe>arc:7z>pe:exe>arc:7zsfx

4 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x3AD420 size 11592 bytes
Info	Overlay extracted: Overlay_f48857d1.bin (1536 bytes)
Info	PDB Path: t$di