Deep Malware Analysis of f45dd38810c460ac20850571e7a608b6 | md5: f45dd38810c460ac20850571e7a608b6 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | PDB Path | AutoIt | CAB:COMPRESSION:LZX | Suspect | Decompiled | PE Memory-Mapped (Dump)

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	f45dd38810c460ac20850571e7a608b6
Sha1	e28aff26ada916b9dea2c06d3c6c3a0a35da35a1
Sha256	f2ed264a15b32c47d14b21ce2176a8412856ffcb3990f1904af283ac21850a99
Sha384	255f52b680ef7f80a88bd275372a11fc834fb053fb8ddb919f747a2b6a0004fde0905276c2e054f0f375b86529f49691
Sha512	4c65ba5084aea95818b16c0f09a8bef93a0668c275930edb9ac0e22cb30c23d30e4688a08cb42954b06599849ef82be972d7addc5b8d42f0db37a9d975a25648
SSDeep	24576:q7tlODrEVSRTxQ3H+IQmNAqRLWFeM9Drx8CK0X+QA+Jv9hGVFpv6cuor:q7GDwaxCH/WmLWoi3xS0TASv9hiXScH
TLSH	5D75239387F841B6F7B777B9A9F21267627638545BB767DF0200469C09237C29231B22

PeID

Microsoft Visual C++ 8.0 (DLL)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential