Deep Malware Analysis of e109149c37152c167818d22b4731a433 | md5: e109149c37152c167818d22b4731a433 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | PDB Path | Javascript | T1059.007

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	e109149c37152c167818d22b4731a433
Sha1	a7ff7db40888f18e4123aeea4153f2f11c6cd950
Sha256	717e8d99fea593ff2ab47baf848f226b0675b82a332cb06c21d4ccf38f9a6fac
Sha384	0bd1d36040f3d78b0fe5f04219d86b660a87f7b6024eb5abad91d46567a128a9e3fbcd9da39b2d45e54688c3c7701ad1
Sha512	b5d96193d4cf0a1cb9655d1a37c155c1f03e3cb4057eeee008880e03e21ac0c0945495ac2a9ca02d85710b7b260f6b1045f709d86e6d3705ba551880c97aa4c0
SSDeep	196608:tZOVuWK49TxBOqaeRcTMUV6l91vYZ7iDvVNe5tSDpf69jmkSu6Lj2ez0l9Zulknc:tevTxBOqae+TYl9OyvvYQfGqu6pK05
TLSH	08077CD3BFF68447E5B256B489F7D6418B3AFA6025B8778B0061211F8D60E43ADC1B36

PeID

Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit )

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:dll~T1059.007>pe:rsrc>bin

Shape pe:dll>pe:rsrc>bin

technique3 nodes

Path pe:dll~T1059.007>scr:js~T1059.007

Shape pe:dll>scr:js

technique2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Overlay extracted: Overlay_28f540b5.bin (12582912 bytes)
Info	PDB Path: WindowsProject472_C4E95538.pdb