Suspect
PE Executable
MD5: 379c74896dee6bb0479368e85253c4a2
Size: 607.74 KB
application/x-dosexec
This sample is a 593.5 KB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- de00a11c0af603f88bf85470fe3afe92fe3a20c1e4b1a9ea5268772bf6efa347
- MD5
- 379c74896dee6bb0479368e85253c4a2
- Verdict
- Inconclusive
- File type
- PE Executable · 593.5 KB
Cite this report: https://app.malva.re/sha256/de00a11c0af603f88bf85470fe3afe92fe3a20c1e4b1a9ea5268772bf6efa347
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
607.74 KB · 607,744 B
First seen
2026-10-17 21:45 · 10 days ago
Last seen
2026-10-17 21:45 · 10 days ago
Last analysis
2026-10-17 21:45 · 10 days ago
Hashes
MD5
379c74896dee6bb0479368e85253c4a2
Sha1
aa3db7c55462e1174a0479399abfacb62ccb6ffe
Sha256
de00a11c0af603f88bf85470fe3afe92fe3a20c1e4b1a9ea5268772bf6efa347
Sha384
651fa637cbe949d6d92a324699f0f73bd8c43ec23d39eed621e26f9e44377706ff88612e78e42ce6a1f93d414fede5ef
Sha512
ad9a24c05e9e41ebfd46d75479c7f4e9e5fe975f81100f7fb3322da73ad298dc5e3549722119cb0aa6b3afee2e0d5b038c3936fd5b88bc5dc461e02be5b02767
SSDeep
12288:2oVqmOiw0FIT2uVtufRVQcrhCrw5RcnTHNvJ1qndQkVj6:xVq1i3uVofs2hCrw5RcTHq+46
TLSH
FDD45A03F7A286D8D02AC875876A9133F6757C8D4A30B6BB57946F212F76B90A73C704
Detection
PeID
Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) Pe123 v2006.4.4-4.12
1 file
EXE379c74896dee6bb0479368e85253c4a2
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes