Suspicious
Suspect

3312ffd917a303213a7155b6ade0adc4

Share on LinkedIn
Print
PE Executable
MD5: 3312ffd917a303213a7155b6ade0adc4
Size: 1.08 MB
application/x-dosexec

This sample is a 1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 11 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
cf66a6b3fc9e4924cab3c9ca716649ff3e6d24f54a814f93b8d42015cbcdb69e
MD5
3312ffd917a303213a7155b6ade0adc4
Verdict
Inconclusive
File type
PE Executable · 1 MB

Cite this report: https://app.malva.re/sha256/cf66a6b3fc9e4924cab3c9ca716649ff3e6d24f54a814f93b8d42015cbcdb69e

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
1.08 MB · 1,079,808 B
First seen
2026-10-19 07:45 · 11 days ago
Last seen
2026-10-19 07:45 · 11 days ago
Last analysis
2026-10-19 07:46 · 11 days ago
Hashes
MD5 3312ffd917a303213a7155b6ade0adc4 Sha1 2ea8cbe06e0a1e04492f5a8e94b76b09aec73528 Sha256 cf66a6b3fc9e4924cab3c9ca716649ff3e6d24f54a814f93b8d42015cbcdb69e Sha384 a0dfd60892e687b86cab1d8525c8d0160d81a3d225695a5a0fbeebb40835e0b29e7e8f6501a00af065872a3332f20613 Sha512 a2b613481d256b64880cf6b5c1683f75c4505ce93164ba9a6508bb266626bfe868e3346b38d6aab7b30327cbc7f8a8f08e0af8f8efc645e998bd7b7cbf1fc377 SSDeep 24576:2ZfoRB4siEK4vgnwBTLA5chPtu9wmDO7H/dlcOfVX:Wn+vhBtheSfM TLSH 3635DE346218CA37D16E52B0C95FC3F8DA6B5E9AE950DF03AAC5FECBB474B140913612
Detection
Symbol obfuscation
Medium

12 files
EXE3312ffd917a303213a7155b6ade0adc4
Structure
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1

Name Value
Module Name
kALz.exe
Full Name
kALz.exe
EntryPoint
System.Void Icehouse.Program::Main()
Scope Name
kALz.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
kALz
Assembly Version
0.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
489
Main Method
System.Void Icehouse.Program::Main()
Main IL Instruction Count
11
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
ldsfld System.Data.DataSet Icehouse.Program::JaaHuoneDataSet
newobj System.Void Icehouse.FormJaaHuone::.ctor(System.Data.DataSet)
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>

An error has occurred. This application may no longer respond until reloaded. Reload 🗙