Suspicious
Suspect

e3b578aa02e2fc3fb557e83f4186395e

PE Executable
MD5: e3b578aa02e2fc3fb557e83f4186395e
Size: 7.53 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 e3b578aa02e2fc3fb557e83f4186395e
Sha1 4583d76c84332d13ceada6f14d3c3b382312e30b
Sha256 c4545d48db19349484d97681beaa8832f25663250db0e5ff16ef36e9e8ea8766
Sha384 11e4e70b627f7d5715288ca9e4af9ea62518ff83abaa73cbb263784aa9e6ad9eb6e38082e43712d7a8409978cda61c57
Sha512 c3e9a2e5f7edd57e54a4737a982ac8a0f2a8a693c6563bbae5531b0893649cf07c0c8aa786dc40de8b5dac1c6b1f8cc13b2d6b6e63f7cf6e81d2d3043cb5a5ae
SSDeep 98304:MHmDGmUndlw9Ahji5c4LZa/AFptlYs9B1qU:IGGYR99n
TLSH 99762A11BA6F55ACD55BC8B487068A239E2130DB1B3AB9FF018486393F69BF01B3D754
PeID
MASM/TASM - sig4 (h)Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12Private EXE Protector V2.30-V2.3X -> SetiSoft Team
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: IT_solutions.pdb
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙