Suspect
PE Executable
MD5: 255589907d713fe5c2e101f43e94b309
Size: 3 MB
application/x-dosexec
This sample is a 2.9 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 8c56ca7bd8683de3e9f4038ddf4d1ddc29e4b4745803ec87778e91ce42d16e2b
- MD5
- 255589907d713fe5c2e101f43e94b309
- Verdict
- Inconclusive
- File type
- PE Executable · 2.9 MB
Cite this report: https://app.malva.re/sha256/8c56ca7bd8683de3e9f4038ddf4d1ddc29e4b4745803ec87778e91ce42d16e2b
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
3 MB · 2,998,784 B
First seen
2026-09-05 12:15 · one month ago
Last seen
2026-09-05 12:15 · one month ago
Last analysis
2026-09-05 12:15 · one month ago
Hashes
MD5
255589907d713fe5c2e101f43e94b309
Sha1
bbc55842988cb790c660209fbec4c70155a967c4
Sha256
8c56ca7bd8683de3e9f4038ddf4d1ddc29e4b4745803ec87778e91ce42d16e2b
Sha384
bbd7b91bf4c8554b711958c864534a5da4f4af44daece545e3ec61d9be2217dad0fdc95c9e83b7965ef19f79ff247be5
Sha512
5db634280d55951354b666306d2edf7eb303545bbdc17a33340752494ff6be5c324856c39cebb0f0190ee5f2528a4346041fb87945d800d99e08672174deae23
SSDeep
49152:NqVFQLR3JDjJlH5tHFj955VTxxcpf6sSzg9u2tBGjpK/VKUU5QUZlxAnU1:U8LfPJR5ZFjD51snS0QoVfUvlx1
TLSH
61D52384FCC23CB6E436C7B75783A07D721A7BC5C5744C1A33C86B41AD41A296DBA36A
Detection
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
1 file
EXE255589907d713fe5c2e101f43e94b309
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes