Suspicious
Suspect

fe7187156431787428fb54a76b1a432c

Share on LinkedIn
Print
ZIP Archive
MD5: fe7187156431787428fb54a76b1a432c
Size: 1.53 MB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 fe7187156431787428fb54a76b1a432c
Sha1 ce0747fab9a293e5c6259486adeee62371673eab
Sha256 0ce6c33423a25435aa0c6ee5e35d5cedcd2aff636bc5a9518a9c3127e3789d3e
Sha384 be1ce3e71d0ea10b6a928e74b9ecdfae99e73aa0364310e73abd82a01411c95f90b56733a4f4a81e68c55429a4036392
Sha512 273440f719aff95f17f1f1aa46ad485da5dbfd2a8177d89a7cdc0da15c718068f65d2e561dcce65094bb9e0b561a4e661d0d8565a2d8a154d3bf3909fd67067f
SSDeep 24576:q1IxZdhbUvHYu3q3hl9cqgL1l5cGje++Wk1hCe4F/wFNNi0SrM:VHgfYkfqgLBDeZWk/34F/mMprM
TLSH 066533035EF80484D1D72B3094EF4B9A2A3D9E6B7E69A057DB76FD2EC8139608C1C749
WinKawaks
blend
ddsom.bld
ddtod.bld
defaultkeysCPS.ini
defaultkeysMVS.ini
DefaultWinKawaksINI.zip
WinKawaks.ini
eeprom
pzloop2.epm
pzloop2j.epm
kaillera
kaillerasrv.conf
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
UPX2
kaillerasrv.txt
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
.rsrc
Resources
RT_ICON
ID:0001
ID:1036
ID:0002
ID:1036
RT_DIALOG
ID:0065
ID:1036
ID:0066
ID:1036
ID:0067
ID:1036
ID:0068
ID:1036
ID:006A
ID:1036
ID:006B
ID:1036
ID:006C
ID:1036
ID:006D
ID:1036
ID:006E
ID:1036
ID:006F
ID:1036
ID:0070
ID:1036
ID:0071
ID:1036
ID:0072
ID:1036
ID:0073
ID:1036
RT_GROUP_CURSOR4
ID:0069
ID:1036
lang
Arabic.lng
Brazilian Portuguese.lng
Bulgarian.lng
Catalan.lng
Charnego.lng
Chinese(Big5).lng
Chinese(Simp).lng
Czech.lng
Dutch.lng
English.lng
Finnish.lng
French.lng
German.lng
Greek.lng
Hebrew.lng
Italian.lng
Japanese.lng
Korean.lng
Norwegian.lng
Polish.lng
Portuguese.lng
Russian.lng
Serbian.lng
Spanish.lng
Swedish.lng
Turkish.lng
roms
neogeo
uni-bios_1_2o.rom
uni-bios_1_3.rom
uni-bios_2_0.rom
uni-bios_2_1.rom
uni-bios_2_2.rom
uni-bios_2_3.rom
uni-bios_2_3o.rom
usa_2slt.bin
vs-bios.rom
000-lo.lo
asia-s3.rom
neodebug.rom
neo-epo.bin
neo-po.bin
sfix.sfix
sp1.jipan.1024
sp-j2.rom
sp-s2.sp1
uni-bios_1_0.rom
uni-bios_1_1.rom
uni-bios_1_2.rom
sample_ini_files.zip
sfz3jr1.ini
xmcota.ini
xmvsf.ini
tracklst
batcirj.dat
captcomm.dat
csclubj.dat
cybotsj.dat
ddtod.dat
dstlk.dat
ecofghtr.dat
ffight.dat
kof94.dat
kof95.dat
kof96.dat
kof97.dat
kof98.dat
kof99.dat
mshvsf.dat
pbobblen.dat
ringdest.dat
sgemf.dat
spf2t.dat
wakuwak7.dat
xmcota.dat
xmvsf.dat
whatsnew.txt
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
.rsrc
ZC
Resources
RT_BITMAP
ID:009A
ID:1036
ID:009E
ID:1036
ID:00B5
ID:1036
ID:00B9
ID:1036
ID:00BA
ID:1036
ID:00BB
ID:1036
ID:00BC
ID:1036
ID:00BD
ID:1036
ID:00CB
ID:1036
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1036
ID:0004
ID:1036
ID:0005
ID:1036
ID:0006
ID:1036
RT_MENU
ID:0080
ID:1033
RT_DIALOG
ID:0064
ID:1033
ID:0066
ID:1033
ID:0082
ID:1036
ID:0085
ID:1036
ID:0088
ID:1036
ID:008C
ID:1036
ID:00A1
ID:1036
ID:00A6
ID:1033
ID:00AA
ID:1036
ID:00AC
ID:1033
ID:00BF
ID:1036
ID:00C1
ID:1036
ID:00C6
ID:1036
ID:00CC
ID:1036
ID:00CD
ID:2057
RT_STRING
ID:0009
ID:1033
ID:0E01
ID:1033
ID:0E14
ID:1033
ID:0E15
ID:1033
ID:0E16
ID:1033
ID:0E71
ID:1033
ID:0E81
ID:1033
ID:0EF1
ID:1033
ID:0EF2
ID:1033
RT_ACCELERATOR
ID:0080
ID:1033
RT_GROUP_CURSOR4
ID:0080
ID:1033
ID:00C2
ID:1036
ID:00C3
ID:1036
RT_VERSION
ID:0001
ID:1033
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 5 STICH kept: 1secondary ignored: 4
bin 4

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙