Suspicious
Suspect

38b46e34dbd0aace0fa13d5d9fbf625a

ZIP Archive
MD5: 38b46e34dbd0aace0fa13d5d9fbf625a
Size: 462.6 KB
application/zip

This sample is a 451.8 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 7 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
3ae0a86fda39a63eb83fa421484e2029bd4076adbf012d297781796ede288d19
MD5
38b46e34dbd0aace0fa13d5d9fbf625a
Verdict
Inconclusive
File type
ZIP Archive · 451.8 KB

Cite this report: https://app.malva.re/sha256/3ae0a86fda39a63eb83fa421484e2029bd4076adbf012d297781796ede288d19

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
462.6 KB · 462,603 B
First seen
2026-10-21 13:46 · 5 days ago
Last seen
2026-10-21 13:46 · 5 days ago
Last analysis
2026-10-21 13:47 · 5 days ago
Hashes
MD5 38b46e34dbd0aace0fa13d5d9fbf625a Sha1 ff4b4a4172644766ceb2c3502feb322017655eb1 Sha256 3ae0a86fda39a63eb83fa421484e2029bd4076adbf012d297781796ede288d19 Sha384 85bca0f6a5febacabc8e221f0736bf024a7cab8cdf4817bb5561d8b824cfdf6956efb76a8d02d8c99795250437587b2e Sha512 fdd54f23beca4b7d76f33181f1ed09feaee13bd7359ad7b88bfef0eb9777dfbaf613602b0aa46e6af1857d7797e46291818926f5aee4806d2f82341ebfa5d8f4 SSDeep 12288:xzYfcEaN9B/Jm0LU0gM7aQ+YyvZJHJmW/:efclN9BhmSHQ5vZJHgW/ TLSH 01A4232CADA106503D67BF403D8C5F024A34A06BB6F9DAA6251F3F884CEFC6C157964D

8 files
ZIP38b46e34dbd0aace0fa13d5d9fbf625a
CMDApplication.cmd
EXEloader.exe
Structure
BINOverlay_8ac1c7b6.bin
BINResources
BINRT_MANIFEST
BINID:0001
BINID:0
DLLlua51.dll
Structure
BINOverlay_1ff5e732.bin
Osdx.o
STICH beta

No STICH Path has been generated for this analysis yet.

4 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 4

8 files
ZIP38b46e34dbd0aace0fa13d5d9fbf625a
CMDApplication.cmd
Osdx.o
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙