Suspect
2f99192c3407a358d6290a06350db7f4
PE Executable
MD5: 2f99192c3407a358d6290a06350db7f4
Size: 27.11 MB
application/x-dosexec
This sample is a 25.9 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 40 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- d32557c05db76ad4a296b30189cbd05440ff9b5399af0904ab3d915fe31c3a14
- MD5
- 2f99192c3407a358d6290a06350db7f4
- Verdict
- Inconclusive
- File type
- PE Executable · 25.9 MB
Cite this report: https://app.malva.re/sha256/d32557c05db76ad4a296b30189cbd05440ff9b5399af0904ab3d915fe31c3a14
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
27.11 MB · 27,106,488 B
First seen
2026-10-22 14:45 · 11 days ago
Last seen
2026-10-22 14:45 · 11 days ago
Last analysis
2026-10-22 14:46 · 11 days ago
Hashes
MD5
2f99192c3407a358d6290a06350db7f4
Sha1
08c96a2b400a9c2fd9d0ffc0fd21788e64153b07
Sha256
d32557c05db76ad4a296b30189cbd05440ff9b5399af0904ab3d915fe31c3a14
Sha384
60f89845b2373864fe0b72908b3d9b87931bd359cad655d50e9dec3698b4dee904245036d0fbcd05c02b40904c0ce6f1
Sha512
3ccde6370bd680513a285eb80a9ff5e5646fbb03a49bb6b22ede79a9b7820a1ef515b54c31511057d2e6a787a64bf620f022637805dc10bab0ae93c6bfe0dca4
SSDeep
393216:HzJNV0sRxO9lWdj77HpTGiEQElnllVgBAwoKCPTam:HzLV16l6j7rpTGiEQE9llVqgf
TLSH
8D57AF51F30B05F6FB434C3645F9AB2F7B39E2DC8974C55AE428242ABAA2C1F45DC291
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamUPolyX 0.3 -> delikon
20 files
EXE2f99192c3407a358d6290a06350db7f4
Structure
P7B[Authenticode]_5ece76c0.p7b
BINResources
BINRT_ICON
BINID:0000
BINID:1033
Structure
BINOverlay_8dcd976d.bin
BIN(folder)
BIN4
BIN19
BIN31
BIN45
BIN57
BIN70
BIN81
BINResources
BINRT_ICON
BINID:0001
IMGID:1033
IMGID:1033-preview.png
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0001
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
BINID:0001
IMGID:1033
IMGID:1033-preview.png
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0001
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
STICH
beta
No STICH Path has been generated for this analysis yet.
6 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
4img
2| Name | Value |
|---|---|
| Info | Authenticode present at 0x19D9600 size 1720 bytes |
20 files
EXE2f99192c3407a358d6290a06350db7f4
Structure
P7B[Authenticode]_5ece76c0.p7b
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account