Suspect
PE Executable
MD5: 45b4d541f8a1d4ec700477cfcacff953
Size: 389.63 KB
application/x-dosexec
This sample is a 380.5 KB PE Executable. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature among its 403 YARA rules. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.
- SHA256
- 6098a3066c8f3edbc83fbc7f516f242a83a7e5fb7fbac7a35b46ee89ecd607bc
- MD5
- 45b4d541f8a1d4ec700477cfcacff953
- Verdict
- No known threat found
- File type
- PE Executable · 380.5 KB
Cite this report: https://app.malva.re/sha256/6098a3066c8f3edbc83fbc7f516f242a83a7e5fb7fbac7a35b46ee89ecd607bc
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
389.63 KB · 389,632 B
First seen
2026-11-02 09:00 · yesterday
Last seen
2026-11-02 09:00 · yesterday
Last analysis
2026-11-02 09:00 · yesterday
Hashes
MD5
45b4d541f8a1d4ec700477cfcacff953
Sha1
38a4ea53a05977e46208c303f4df2c936be311c1
Sha256
6098a3066c8f3edbc83fbc7f516f242a83a7e5fb7fbac7a35b46ee89ecd607bc
Sha384
08a232e58f7092846f001e85d427b303f16b9e66425dd5dc6df3e586e41aecd00c2c94945d5997283a89bebe9c83c0c6
Sha512
de0c9339dc95f6e11b4ff8c1ac9e091f2f33c9a7c293b88c9e9979a7af6ab30c390233bce26b344091bd133baa27910867e21365524f3d4f508673d1b97719cb
SSDeep
6144:b7xWm+5wnTb6MS2TUoMpQ4CcPyEeScCcplGYF95p8FABQO9e:bI5pR2TUoMpQ4CbfPF3C4W
TLSH
10848D41B985C132E5AE0570B935EFA65D7DBD710BE0A4CFA3C40DAE9D207C1AB3871A
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft Team
1 file
EXE45b4d541f8a1d4ec700477cfcacff953
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
| Name | Value |
|---|---|
| Info | PDB Path: t$di |