This sample is a 5 MB PE Executable. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature among its 403 YARA rules. Static analysis extracted 2 embedded or derived files. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.
- SHA256
- dfaf761e4fc7ba493df5e0d25d2aee2c2f000fd6c43df4acb3c9922fa94089d8
- MD5
- 1ee0a60a4a1e6bd08544054cec728d0e
- Verdict
- No known threat found
- File type
- PE Executable · 5 MB
Cite this report: https://app.malva.re/sha256/dfaf761e4fc7ba493df5e0d25d2aee2c2f000fd6c43df4acb3c9922fa94089d8
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
pe:dll>pe:dll
pe:dll>pe:dll
| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_693e9af8.bin (3 bytes) |