Suspicious
Suspect

fede437f58ab0f84d820b7282d470caa

PE Executable
MD5: fede437f58ab0f84d820b7282d470caa
Size: 206.85 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 fede437f58ab0f84d820b7282d470caa
Sha1 248fb1745ef2d11301f2b003b5fab87b436f4cc0
Sha256 e1c289d5b8dcab62f8dad6179bf64ef621b6931de3aafb451a68a8a6cb7c2a7f
Sha384 4c51b3778d5b217ea45375abb517280881b1569a40419c8d2a031f476b4c008fd5b9bb6906da2c0bd6121aab451615f5
Sha512 8f166ceb043bc4a9fb9defc903125ce3b83ac2f91c17315854dd3c7f441a835dd68f0a150c8d4d3de00d743f114cb476d8d51b9ccc532363ea02f7c78375c4db
SSDeep 3072:8iYn74nwjJAr9gfkdUkQm+siu7eLzE/terXE9gCkjrJ4pG9e94IQCS:IcnyktQzaeL4i0qCoV4pGl
TLSH 52146C267A46A8FCE446C174C316D573677278C90F22B9FF11A462382F6AAE12F3D714
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: xplane_bridge.pdb
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙