Suspect
2afcd94e4449a6a5dd5f4d8d7c89d645
Rar Archive
MD5: 2afcd94e4449a6a5dd5f4d8d7c89d645
Size: 3.23 MB
application/vnd.rar
This sample is a 3.1 MB Rar Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 151 embedded or derived files. It matches 2 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 0f9acfa3a63308b30ee80a151ad179a86411e5cfe78ca281d308f0bfcb55fc5b
- MD5
- 2afcd94e4449a6a5dd5f4d8d7c89d645
- Verdict
- Inconclusive
- File type
- Rar Archive · 3.1 MB
Cite this report: https://app.malva.re/sha256/0f9acfa3a63308b30ee80a151ad179a86411e5cfe78ca281d308f0bfcb55fc5b
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Rar archive
Size
3.23 MB · 3,231,037 B
First seen
2026-10-28 19:16 · 2 days ago
Last seen
2026-10-28 19:16 · 2 days ago
Last analysis
2026-10-28 19:16 · 2 days ago
Hashes
MD5
2afcd94e4449a6a5dd5f4d8d7c89d645
Sha1
52cee4466a71c7b0487a5d5fab47460e891bc353
Sha256
0f9acfa3a63308b30ee80a151ad179a86411e5cfe78ca281d308f0bfcb55fc5b
Sha384
c6393d01e862bfbaeca767ff10cb26fe821581b79a62b762affcd3ace58fd02c9c0191a4a12d210b13cac61e0a14a3da
Sha512
cced042fe6bf085c59fc1e9bc0e4c1833c7cadb20330333a50cab599b83684f1c12185a30d2d496d404d9c7f3980d8c6c39caeccce829f18c898400b6b2b6a64
SSDeep
98304:S6GG7WkzBYmp7f5dZ3CYJpATqWnLwe2W2:S6GKY+j5dRxpAT7LP2
TLSH
61E5330C3AB998440DF88A0D360C172516334D6D85D6DEE4CBAD28A587E6E97C7EB373
147 files
RAR2afcd94e4449a6a5dd5f4d8d7c89d645
EXEលិខិតអញ្ជើញជូនចំពោះឯកឧត្ដមបណ្ឌិត_សៀង_សុវណ្ណា.pdf.com
Structure
RAROverlay_27cd76ff.bin
PDFលិខិតអញ្ជើញជូនចំពោះឯកឧត្ដមបណ្ឌិត_សៀង_សុវណ្ណា.pdf
BINText (Preview)
TXTPage #1
TXTPage #2
TXTPage #3
TXTPage #4
BIN#Stream obj 7 0
IMG#Stream obj 5 0
EXIF#Stream obj 5 0.exif
IMG#Stream obj 5 0-preview.png
BIN#Stream obj 8 0
BIN#Stream obj 18 0
BIN#Stream obj 19 0
BIN#Stream obj 16 0
IMG#Stream obj 20 0
IMG#Stream obj 20 0-preview.png
BIN#Stream obj 24 0
BIN#Stream obj 22 0
BIN#Stream obj 28 0
BIN#Stream obj 29 0
BIN#Stream obj 33 0
BIN#Stream obj 36 0
BIN#Stream obj 38 0
BIN#Stream obj 39 0
BIN#Stream obj 40 0
BIN#Stream obj 41 0
BIN#Stream obj 42 0
BIN#Stream obj 43 0
BIN#Stream obj 44 0
BIN#Stream obj 45 0
BIN#Stream obj 46 0
BIN#Stream obj 47 0
BIN#Stream obj 48 0
BIN#Stream obj 49 0
BIN#Stream obj 50 0
BIN#Stream obj 51 0
BIN#Stream obj 52 0
BIN#Stream obj 53 0
BIN#Stream obj 54 0
BIN#Stream obj 55 0
BIN#Stream obj 56 0
BIN#Stream obj 57 0
BIN#Stream obj 58 0
BIN#Stream obj 59 0
BIN#Stream obj 60 0
BIN#Stream obj 61 0
BIN#Stream obj 62 0
BIN#Stream obj 63 0
BIN#Stream obj 64 0
BIN#Stream obj 65 0
BIN#Stream obj 66 0
BIN#Stream obj 67 0
BIN#Stream obj 68 0
BIN#Stream obj 69 0
BIN#Stream obj 70 0
BIN#Stream obj 71 0
BIN#Stream obj 72 0
BIN#Stream obj 73 0
BIN#Stream obj 74 0
BIN#Stream obj 75 0
BIN#Stream obj 76 0
BIN#Stream obj 77 0
BIN#Stream obj 78 0
BIN#Stream obj 79 0
BIN#Stream obj 80 0
BIN#Stream obj 81 0
BIN#Stream obj 82 0
BIN#Stream obj 83 0
BIN#Stream obj 84 0
BIN#Stream obj 85 0
BIN#Stream obj 86 0
BIN#Stream obj 87 0
BIN#Stream obj 88 0
BIN#Stream obj 89 0
BIN#Stream obj 90 0
BIN#Stream obj 91 0
BIN#Stream obj 92 0
BIN#Stream obj 93 0
BIN#Stream obj 94 0
BIN#Stream obj 95 0
BIN#Stream obj 96 0
BIN#Stream obj 97 0
BIN#Stream obj 98 0
BIN#Stream obj 99 0
BIN#Stream obj 100 0
BIN#Stream obj 101 0
BIN#Stream obj 102 0
BIN#Stream obj 106 0
BIN#Stream obj 107 0
BIN#Stream obj 111 0
BIN#Stream obj 116 0
BIN#Stream obj 117 0
BIN#Stream obj 121 0
BIN#Stream obj 126 0
BIN#Stream obj 128 0
BIN#Stream obj 178 0
BIN#Stream obj 180 0
BIN#Stream obj 236 0
TXTStructure
EXEassumable.exe
Structure
BINOverlay_92ce8cf4.bin
BINResources
BINRT_ICON
BINID:0001
BINID:1033
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINID:0006
IMGID:1033
IMGID:1033-preview.png
BINID:0007
BINID:1033
BINID:0008
BINID:1033
BINID:0009
BINID:1033
BINRT_DIALOG
BINID:0067
BINID:1033
BINID:0069
BINID:1033
BINID:006A
BINID:1033
BINID:006B
BINID:1033
BINID:006F
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0067
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
BINResources
BINPNG
BINID:0065
IMGID:2052
IMGID:2052-preview.png
BINID:0066
IMGID:2052
IMGID:2052-preview.png
BINRT_ICON
BINID:0001
BINID:2052
BINID:0002
BINID:2052
BINID:0003
BINID:2052
BINID:0004
BINID:2052
BINID:0005
BINID:2052
BINID:0006
BINID:2052
BINID:0007
IMGID:2052
IMGID:2052-preview.png
BINRT_DIALOG
BINID:0000
BINID:2052
BINRT_STRING
BINID:0007
BINID:2052
BINID:0008
BINID:2052
BINID:0009
BINID:2052
BINID:000A
BINID:2052
BINID:000B
BINID:2052
BINID:000C
BINID:2052
BINID:000D
BINID:2052
BINID:000E
BINID:2052
BINID:000F
BINID:2052
BINID:0010
BINID:2052
BINID:0011
BINID:2052
BINRT_GROUP_CURSOR4
BINID:0064
BINID:2052
BINRT_MANIFEST
BINID:0001
BINID:2052
STICH
beta
No STICH Path has been generated for this analysis yet.
8 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
4img
4| Name | Value |
|---|---|
| Version | 1.4 |
| ModifiedDate | D:20261027021104Z |
| Producer | iLovePDF |
| /Producer | iLovePDF |
| /ModDate | D:20261027021104Z |
147 files
RAR2afcd94e4449a6a5dd5f4d8d7c89d645
EXEលិខិតអញ្ជើញជូនចំពោះឯកឧត្ដមបណ្ឌិត_សៀង_សុវណ្ណា.pdf.com
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account