Suspect
PE Executable
MD5: 0bc54f9df3205240624b97ce3b8db8e3
Size: 3 MB
application/x-dosexec
This sample is a 2.9 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 3ffd047bf21cdd0072ef8a4078466e7bc94474105c05110d204f97063dc8a96e
- MD5
- 0bc54f9df3205240624b97ce3b8db8e3
- Verdict
- Inconclusive
- File type
- PE Executable · 2.9 MB
Cite this report: https://app.malva.re/sha256/3ffd047bf21cdd0072ef8a4078466e7bc94474105c05110d204f97063dc8a96e
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
3 MB · 3,003,904 B
First seen
2026-10-26 09:15 · 6 days ago
Last seen
2026-10-26 09:15 · 6 days ago
Last analysis
2026-10-26 09:15 · 6 days ago
Hashes
MD5
0bc54f9df3205240624b97ce3b8db8e3
Sha1
e4db785e8eed21c8cda9ebf584b0cc0d1e768632
Sha256
3ffd047bf21cdd0072ef8a4078466e7bc94474105c05110d204f97063dc8a96e
Sha384
00b31fa7061a616fab6b3506fb5cf7d41330bc04e316fec0c4a1aed8b91aa04eb380d4d9b5481c1b21776720cd356a31
Sha512
4270f364f04eb8f4f88988c77616d181b4d0a3614f69969a85a2da84d971246d960fc247886e751cedba5d81a971373595a06b27a22a29cc37b31a93cdb1cb17
SSDeep
49152:yftLgbRew+1RIp0H04MbHJ9JnlLOvtr2Vj42ZqMO5exJ71Fc2+UShAQObz6Zq6xM:agb8wiqp00DJ3lLwqVx/Fc2+Typz6ZrO
TLSH
7AD523C8FDD67474E472C37B874BA4ADB22977A24BB48C4A768C6B206D132046C773B5
Detection
PeID
Microsoft Visual C++ v6.0 DLL
1 file
EXE0bc54f9df3205240624b97ce3b8db8e3
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes