Suspect
06f1324b5524081ef815ab7b5e06e8ea
PE Executable
MD5: 06f1324b5524081ef815ab7b5e06e8ea
Size: 311.3 KB
application/x-dosexec
This sample is a 304 KB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 6 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 532cc390d6c46fbd0e472b59bf7a21aaa9b5837ed5cfcaee20a77482a6958b7f
- MD5
- 06f1324b5524081ef815ab7b5e06e8ea
- Verdict
- Inconclusive
- File type
- PE Executable · 304 KB
Cite this report: https://app.malva.re/sha256/532cc390d6c46fbd0e472b59bf7a21aaa9b5837ed5cfcaee20a77482a6958b7f
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
311.3 KB · 311,296 B
First seen
2026-10-25 11:00 · yesterday
Last seen
2026-10-25 11:00 · yesterday
Last analysis
2026-10-25 11:00 · yesterday
Hashes
MD5
06f1324b5524081ef815ab7b5e06e8ea
Sha1
7b1656ebf996bd50d042d5cd77ec119c7ca54837
Sha256
532cc390d6c46fbd0e472b59bf7a21aaa9b5837ed5cfcaee20a77482a6958b7f
Sha384
a090ef94bd0fbd8c78a7793c796b9f9d1cff4bc9f26dcd3348853edfc7c05bcfa260abf19b6e01f976b9300d95b42fd4
Sha512
67ba11282729ea38b8c8905a9dc2398db95c067dc104146eef8690a0a8237fa8fce24ee355ef9318a1cee8073805d78504bfbecac726f11adaa4c81b90a1ac8d
SSDeep
6144:9L7mJAK9d+gY2YEZkijpNqWogheMase3CrTdw31GTIUf6WeUQGTSqGZI:9LK9z+g/YjijP7oghe4caoGTIUf6WeUR
TLSH
0A647B9C726076EFC857C472DEA81CB4EB6579BB831B5203A02715ADEA0D997CF140F2
Detection
PeID
Microsoft Visual C# / Basic .NET
Symbol obfuscation
Very high
3 files
EXE06f1324b5524081ef815ab7b5e06e8ea
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BINRT_MANIFEST
BINID:0001
BINID:0
STICH
beta
No STICH Path has been generated for this analysis yet.
1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
1| Name | Value |
|---|---|
| Module Name | server1.exe |
| Full Name | server1.exe |
| EntryPoint | |
| Scope Name | server1.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | server1 |
| Assembly Version | 3.8.4.7 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.8 |
| Total Strings | 6 |
| Main Method | |
| Main IL Instruction Count | 0 |
| Main IL | — |
| Module Name | server1.exe |
| Full Name | server1.exe |
| EntryPoint | |
| Scope Name | server1.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | server1 |
| Assembly Version | 3.8.4.7 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.8 |
| Total Strings | 6 |
| Main Method | |
| Main IL Instruction Count | 0 |
| Main IL | — |
3 files
EXE06f1324b5524081ef815ab7b5e06e8ea
Structure
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account