Suspect
279fe894031b458c9269c33194c7ee56
PE Executable
MD5: 279fe894031b458c9269c33194c7ee56
Size: 10.46 MB
application/x-dosexec
This sample is a 10 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 12 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- f28ef4bae286e3d95f622b5d71b08e8be62c32da0f6a755ca6dc255241c5208c
- MD5
- 279fe894031b458c9269c33194c7ee56
- Verdict
- Inconclusive
- File type
- PE Executable · 10 MB
Cite this report: https://app.malva.re/sha256/f28ef4bae286e3d95f622b5d71b08e8be62c32da0f6a755ca6dc255241c5208c
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
10.46 MB · 10,456,488 B
First seen
2026-10-26 07:45 · 4 days ago
Last seen
2026-10-26 07:45 · 4 days ago
Last analysis
2026-10-26 07:45 · 4 days ago
Hashes
MD5
279fe894031b458c9269c33194c7ee56
Sha1
daaffb3bef3481f977c764bc4f780b07304e7a64
Sha256
f28ef4bae286e3d95f622b5d71b08e8be62c32da0f6a755ca6dc255241c5208c
Sha384
0159d17448f1a97418d544832e570c8ff4dbcbd9f7365569c58e00a8326e8a00b15dc6f26729fcfcc6ec1cbdb93c52ce
Sha512
f8f122bc31226eea19d3fc7816430c4e3fcba26599f95c5824c74562e4652b2fc948eae0aefd4ca418bdd5b01e000c16cb10dd75165bb0d1a663e9950e3e8809
SSDeep
196608:2e9tzfpu7boxyxuBwB9drbdXQaN+MofR4Rmh8ZsCdJGoHswRwpCTFhE7EY:debqyx/hrbdXQfM6R4Rmhw9HdHswRwiq
TLSH
C3B63355F2E014FFD967517E48B5860AE2E2BD220FE6C4EF0B640B161E633E16A3C225
Detection
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
13 files
EXE279fe894031b458c9269c33194c7ee56
Structure
BINOverlay_3e8af1b4.bin
BINResources
BINRT_ICON
BINID:0001
BINID:0
BINID:0002
BINID:0
BINID:0003
BINID:0
BINID:0004
IMGID:0
IMGID:0-preview.png
BINID:0005
BINID:0
BINID:0006
BINID:0
BINID:0007
BINID:0
BINRT_GROUP_CURSOR4
BINID:0001
BINID:0
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:0
STICH
beta
No STICH Path has been generated for this analysis yet.
3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2img
1| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_3e8af1b4.bin (10110376 bytes) |
| Info | PDB Path: t$mn |
13 files
EXE279fe894031b458c9269c33194c7ee56
Structure
BINOverlay_3e8af1b4.bin
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account