Suspect
PE Executable
MD5: 4408fc178af9402887f4523f9dff525d
Size: 5.24 MB
application/x-dosexec
This sample is a 5 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 11c6eb07317cba1a44151b981ba1bd3a7a83a2bd88a6a82166b09e9eb0482c4d
- MD5
- 4408fc178af9402887f4523f9dff525d
- Verdict
- Inconclusive
- File type
- PE Executable · 5 MB
Cite this report: https://app.malva.re/sha256/11c6eb07317cba1a44151b981ba1bd3a7a83a2bd88a6a82166b09e9eb0482c4d
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.24 MB · 5,236,224 B
First seen
2026-09-05 14:45 · one month ago
Last seen
2026-09-05 14:45 · one month ago
Last analysis
2026-09-05 14:45 · one month ago
Hashes
MD5
4408fc178af9402887f4523f9dff525d
Sha1
ada7858ec23dacfc3cad200d4d8eee4f9259f86d
Sha256
11c6eb07317cba1a44151b981ba1bd3a7a83a2bd88a6a82166b09e9eb0482c4d
Sha384
29a193393c9f01c7c291a20ae79db74113cc89fd97775793af1df58f3e54652749bc0d7d9142e5371eee2ef567abc39e
Sha512
6a32cb73f97fc06fb80424616feeed81d2f0e5d744dfc05af48fae83ca117f66ef15ffdbfe0576c5d13f5a208228a021ab09eda3bd13043a09b3e0f4cc3e3d3e
SSDeep
98304:Xi3zkm7q5IqmXeliRKENWcrgvqJielO3LU8ff9NGPxRj5hV:Xi3zkm7EIHOliRK2vgvOieooGfDGZRd
TLSH
A63633A6BAC350B1D499C3B48202346EF13A7BE105317E133BCD691AADB6F56817E7C4
Detection
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
1 file
EXE4408fc178af9402887f4523f9dff525d
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes