Malicious
PE Executable
MD5: ee2745732746b920aca8df89d96d1614
Size: 4.39 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | ee2745732746b920aca8df89d96d1614 |
| Sha1 | 2ef27de2a85f0ee7ab49c906f4b2e3105b3a829f |
| Sha256 | 505e8314a5eb11b4c79f221199ba06c8b338a4b121b5ca141ef471874c29ccb8 |
| Sha384 | 8fdf58e2746ed167d689955244bfbb149ecb25a7cc6b7d5057c229ceff5726ddefef431047a90c81655783d9ca7a44e6 |
| Sha512 | 81c85e422f92edc90e3271efd558356113b3da389ab98f7822dbc5c4349ea756f2000e991e7f59c2d387dfc74d7940612dea65ccf23b5e8d971518a13280c0db |
| SSDeep | 49152:2/09O1vS7+Ck8D1oF6Zr0OEK2DbdqoiPJ4yUnwykR56phwg8aSnUIA2lnu5:2/d78qNbiPJjUn7PGBaxO05 |
| TLSH | 1116CE50FCDB10B5E607593118AB62BF2734AD094F35CAC7E6447B6DED73AE1093222A |
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamUPolyX 0.3 -> delikontElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
3 / 3
Path
pe:exe~T1027~T1027.001~T1055~T1140>pe:rsrc>img
Shape
pe:exe>pe:rsrc>img
malicious
3 nodes
Path
pe:exe~T1027~T1027.001~T1055~T1140>pe:rsrc>bin
Shape
pe:exe>pe:rsrc>bin
malicious
3 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Authenticode present at 0x42DE00 size 8984 bytes |
| Attribution | |