Suspect
PE Executable
MD5: 3f885c439c08d1e6ae554339d0f1bc3b
Size: 5.22 MB
application/x-dosexec
This sample is a 5 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 1 embedded or derived file. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- dfa0e88fa2c28581d8c12b04d4f3e2518c578c62edc249dda867dbc7c0715d7a
- MD5
- 3f885c439c08d1e6ae554339d0f1bc3b
- Verdict
- Inconclusive
- File type
- PE Executable · 5 MB
Cite this report: https://app.malva.re/sha256/dfa0e88fa2c28581d8c12b04d4f3e2518c578c62edc249dda867dbc7c0715d7a
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.22 MB · 5,219,192 B
First seen
2026-08-18 23:46 · 2 months ago
Last seen
2026-08-18 23:46 · 2 months ago
Last analysis
2026-08-18 23:46 · 2 months ago
Hashes
MD5
3f885c439c08d1e6ae554339d0f1bc3b
Sha1
f97a4e0c8f38544f38140ea05c87356e57f619ee
Sha256
dfa0e88fa2c28581d8c12b04d4f3e2518c578c62edc249dda867dbc7c0715d7a
Sha384
d1dddfa88ba061298b8ad1c354c3d26ba2f881e56dbc71b6f4b644ff83d2a885202acb37d89ad311becdab3c4d1d3495
Sha512
9840803388b74ee0f17c77c0f5d7e0e7a1a35365a6f824ca67ddcbfc0474f714594924ede59e0bb7fd78df572ddf17d84df118c4cbb509d009511ddef298b25d
SSDeep
49152:oKWw3S279zxZKgrb/TNvO90d7HjmAFd4A64nsfJFoBn/sB6NpokBZKpl9TOkAbOp:r79z/zMA6tjYN8W6CasRZi
TLSH
A1369C43BD95A0A4C4EED63485725251B730B8894B3033E72E52FBB92E337C45EB9B94
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
2 files
EXE3f885c439c08d1e6ae554339d0f1bc3b
Structure
P7B[Authenticode]_c41bafc8.p7b
STICH
beta
No STICH Path has been generated for this analysis yet.
1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
1| Name | Value |
|---|---|
| Info | Authenticode present at 0x4F8400 size 8056 bytes |