Suspect
PE Executable
MD5: 08abb182693512d1f9a26d8c8650fe54
Size: 5.3 MB
application/x-dosexec
This sample is a 5.1 MB PE Executable. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature among its 403 YARA rules. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.
- SHA256
- 34b831f8765a8aa3c40d1f06525c39675da5ee55169da0ec669355fd0cf33cc5
- MD5
- 08abb182693512d1f9a26d8c8650fe54
- Verdict
- No known threat found
- File type
- PE Executable · 5.1 MB
Cite this report: https://app.malva.re/sha256/34b831f8765a8aa3c40d1f06525c39675da5ee55169da0ec669355fd0cf33cc5
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.3 MB · 5,298,176 B
First seen
2026-09-22 05:15 · one month ago
Last seen
2026-09-22 05:15 · one month ago
Last analysis
2026-09-22 05:15 · one month ago
Hashes
MD5
08abb182693512d1f9a26d8c8650fe54
Sha1
f95991ef635a15f871a8a764522dff2dd39a7b75
Sha256
34b831f8765a8aa3c40d1f06525c39675da5ee55169da0ec669355fd0cf33cc5
Sha384
f8cd79176c363f507b54d2c3ab807c778aba218d1632b9c050fb8624626aae61cac24fadaf2494bf3c67a070e2e37b4b
Sha512
1dfa8d8b9b48417795dd04f10b2c48ca8ea60bd9eb98b346b5a93c22f1efbab22e5165916437def1ff8630250c9318ee300a4a70f10454b1e05533a2b76359b7
SSDeep
98304:DXDqPoBhz1aRxcSUDk36SAEdhvxWa9P5UBSa:DXDqPe1Cxcxk3ZAEUaduBSa
TLSH
9E36F1037285C066D0141A394C67DAECA6E3FCD5FE2D900B7ED6734F2977A86EA41B12
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) UPolyX 0.3 -> delikon
1 file
EXE08abb182693512d1f9a26d8c8650fe54
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential