Suspect
PE Executable
MD5: 0c5944a61988f7dd679065b9d591a7a5
Size: 3.59 MB
application/x-dosexec
This sample is a 3.4 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- d1996e61d39f9de1699f223f63e7716ac032bc8daf6028c31bb081f4a751b794
- MD5
- 0c5944a61988f7dd679065b9d591a7a5
- Verdict
- Inconclusive
- File type
- PE Executable · 3.4 MB
Cite this report: https://app.malva.re/sha256/d1996e61d39f9de1699f223f63e7716ac032bc8daf6028c31bb081f4a751b794
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
3.59 MB · 3,592,192 B
First seen
2026-08-27 13:30 · 2 months ago
Last seen
2026-08-27 13:30 · 2 months ago
Last analysis
2026-08-27 14:32 · 2 months ago
Hashes
MD5
0c5944a61988f7dd679065b9d591a7a5
Sha1
41f3b5920cdd28fd322df3402382e92614447461
Sha256
d1996e61d39f9de1699f223f63e7716ac032bc8daf6028c31bb081f4a751b794
Sha384
088a452e7db32023eca015779a9b9a22836c04671fc8425b905030e824ca1098ac183c18bdc3b3b36ea888bc426fe29b
Sha512
bf968d434d010a195410e083fe4cf86022374c4bfbce8c88179b978f1c4db5fb5302a3a29b7251edf8893103c7d80e1b77d77a6c4af25ce3832e2f1f4e21ac17
SSDeep
98304:5/VSr/8aUfR5ex2kWSCG+kSDtbaEWihAw1l:588bRMQSPaaE91
TLSH
E4F5339E145589D4F167C6B9B2277B3C3CBAC236D47188C7C6BDE7C015BAEB20311A62
Detection
PeID
Microsoft Visual C++ v6.0 DLLUPX -> www.upx.sourceforge.netUPX 2.93 - 3.95 (LZMA) ASL sign UPX 3.02UPX v3.0UPX v3.0 (EXE_LZMA) -> Markus Oberhumer & Laszlo Molnar & John Reiser
1 file
EXE0c5944a61988f7dd679065b9d591a7a5
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes