Malicious
PE Executable
MD5: f1ce9e4aae6692fb034cdcc5ad29966b
Size: 12.57 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
12.57 MB · 12,570,112 B
Hashes
MD5
f1ce9e4aae6692fb034cdcc5ad29966b
Sha1
3553b53210c1ef1d4db5a166abab53422c22b206
Sha256
660c6866e4451f641f8e0a48362dc5bbb8cc35af5fc01d85be99ec1f70f81e87
Sha384
c7a194afecfe9125930d5fca4084ac616d1a1c07ebcb1183ac77b41078afcd1fbbb2b421a8b1796c05266dc62220d8f7
Sha512
eae7238856fdff60b1b69aa195ea783e94215cdd55cc7ec1906dfdb16bf5c714b5bbb1b8c0f163012dec283f7fcf6745c8bf7109b0fcc01a2fa8f29294266b7f
SSDeep
98304:gGsqTIVri2C3jGdD4/LoJr4i3HVd7EqO/:FTx3jUDsErTeqO/
TLSH
5AC65C11FACB54F6F9036831416BB27F23315D048B28DB9BEB583B6BF877691186A305
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 1 file
EXEf1ce9e4aae6692fb034cdcc5ad29966bT1027 · T1055Vidar Stealer
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055
Shape
pe:exe
malicious
1 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |