Suspect
3bafb68ff7bc56c4bb8b13d031f8d960
PE Executable
MD5: 3bafb68ff7bc56c4bb8b13d031f8d960
Size: 1.1 MB
application/x-dosexec
This sample is a 1.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 11 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- b973e9eafb1815a010e3ab924ad4b7a1967fa9b609268f226a3b3912276d2960
- MD5
- 3bafb68ff7bc56c4bb8b13d031f8d960
- Verdict
- Inconclusive
- File type
- PE Executable · 1.1 MB
Cite this report: https://app.malva.re/sha256/b973e9eafb1815a010e3ab924ad4b7a1967fa9b609268f226a3b3912276d2960
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
1.1 MB · 1,101,824 B
First seen
2026-10-25 17:00 · 8 days ago
Last seen
2026-10-25 17:00 · 8 days ago
Last analysis
2026-10-25 17:00 · 8 days ago
Hashes
MD5
3bafb68ff7bc56c4bb8b13d031f8d960
Sha1
f0a1423b2af6f5cde74c1575cf9d8ee386ecf1d4
Sha256
b973e9eafb1815a010e3ab924ad4b7a1967fa9b609268f226a3b3912276d2960
Sha384
de584b91cd3314b6578acd193e6db52d0897bdbe9cbfd4f3a383280a010eb33e135fa1b9021b3853d5970ea581f65c09
Sha512
f9d8b7e2e29a20dfe6e7182db5f7ceed5b753c438e5e955547597bd2dcbd0988c1317ab9e3495c9e290660b536f3930d2f74962db1e368e6c712c4d9b775ae80
SSDeep
12288:C9Ih2d9fS3JfLcegx8tfKc+eSEhf1i0dV8V+PGlXij3kuRhE0qRBlQJKz:C6hGIwzx8tfx+eb7mQ1Lvh/oQJKz
TLSH
6F35BD1DBEB342EBC35AC1304E574D72A56678CD072456ABFE7843663F236918E29E0C
Detection
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
12 files
EXE3bafb68ff7bc56c4bb8b13d031f8d960
Structure
BINResources
BINRT_MANIFEST
BINID:0001
BINID:1033
BINRT_ICON
BINID:0001
IMGID:1033
IMGID:1033-preview.png
BINID:0002
IMGID:1033
IMGID:1033-preview.png
BINID:0003
IMGID:1033
IMGID:1033-preview.png
BINID:0004
IMGID:1033
IMGID:1033-preview.png
BINRT_GROUP_CURSOR4
BINID:0001
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
STICH
beta
No STICH Path has been generated for this analysis yet.
2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
1img
1| Name | Value |
|---|---|
| Info | PDB Path: otro.pdb |
12 files
EXE3bafb68ff7bc56c4bb8b13d031f8d960
Structure
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account