Suspect
PE Executable
MD5: fede437f58ab0f84d820b7282d470caa
Size: 206.85 KB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | fede437f58ab0f84d820b7282d470caa |
| Sha1 | 248fb1745ef2d11301f2b003b5fab87b436f4cc0 |
| Sha256 | e1c289d5b8dcab62f8dad6179bf64ef621b6931de3aafb451a68a8a6cb7c2a7f |
| Sha384 | 4c51b3778d5b217ea45375abb517280881b1569a40419c8d2a031f476b4c008fd5b9bb6906da2c0bd6121aab451615f5 |
| Sha512 | 8f166ceb043bc4a9fb9defc903125ce3b83ac2f91c17315854dd3c7f441a835dd68f0a150c8d4d3de00d743f114cb476d8d51b9ccc532363ea02f7c78375c4db |
| SSDeep | 3072:8iYn74nwjJAr9gfkdUkQm+siu7eLzE/terXE9gCkjrJ4pG9e94IQCS:IcnyktQzaeL4i0qCoV4pGl |
| TLSH | 52146C267A46A8FCE446C174C316D573677278C90F22B9FF11A462382F6AAE12F3D714 |
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | PDB Path: xplane_bridge.pdb |