Malicious
PE Executable
MD5: e5e5628c410432db9e45a4e88b333f13
Size: 38.91 KB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
38.91 KB · 38,912 B
First seen
2026-08-19 07:00 · 2 months ago
Last seen
2026-08-19 07:00 · 2 months ago
Last analysis
2026-08-19 07:01 · 2 months ago
Hashes
MD5
e5e5628c410432db9e45a4e88b333f13
Sha1
06e1d65de4c4d25fde2db5408c996c88db7749b4
Sha256
6e73aa9feffa5b135f6a24cb1b0da5e5231b3b818abe71c550e936d785c6debc
Sha384
196a2ec5cb120b7a047e8783aa56d5a60efbfe6a7d9fb1c46d5fcb49ba83c92cb8b6bd59c9add30a5048e1181b14c738
Sha512
b3c185c550940758f043f3133be8c50488e933f7e7bff86cdd2b2f136a90ad8f40839ff8ba80e85ba8490a03bc132b74514fdeb342d364bb15c739180ae6ba3f
SSDeep
768:/kI8jEaD3A0rTT6RgE5ha/9fA7IopDN1kDWu2fU7:cDNVTT6RuVEIkXi7
TLSH
81033B12A3AF8570C5A9567BEC56818C03B3F3459A23DF1F74C92205AED3357C7A2726
Detection
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Symbol obfuscation
Very high
1 malicious · 9 files
EXEe5e5628c410432db9e45a4e88b333f13
Structure
BINResources
BIN.Net Resources
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll>pe:rsrc>bin
Shape
pe:dll>pe:rsrc>bin
malicious
3 nodes
Path
pe:dll>bin
Shape
pe:dll>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | PDB Path: curso.pdb |
| Module Name | curso.dll |
| Full Name | curso.dll |
| Scope Name | curso.dll |
| Scope Type | ModuleDef |
| Kind | Dll |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | curso |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.7.2 |
| Total Strings | 23 |
| Main Method | Not found or no body |
| Module Name | curso.dll |
| Full Name | curso.dll |
| Scope Name | curso.dll |
| Scope Type | ModuleDef |
| Kind | Dll |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | curso |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.7.2 |
| Total Strings | 23 |
| Main Method | Not found or no body |