Suspect
PE Executable
MD5: 45f35fa37276991e28bbedaaf15c1852
Size: 2.11 MB
application/x-dosexec
This sample is a 2 MB PE Executable. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature. It matches 1 YARA rule. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.
- SHA256
- 4872aaaf95cbe4e6cdab401914549f72da86dd485a3a708cd86af87bc47d229c
- MD5
- 45f35fa37276991e28bbedaaf15c1852
- Verdict
- No known threat found
- File type
- PE Executable · 2 MB
Cite this report: https://app.malva.re/sha256/4872aaaf95cbe4e6cdab401914549f72da86dd485a3a708cd86af87bc47d229c
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
2.11 MB · 2,107,392 B
First seen
2026-11-01 11:45 · 2 days ago
Last seen
2026-11-01 11:45 · 2 days ago
Last analysis
2026-11-01 11:45 · 2 days ago
Hashes
MD5
45f35fa37276991e28bbedaaf15c1852
Sha1
b528292362c02aa5ff1500e563c76c87cd157b29
Sha256
4872aaaf95cbe4e6cdab401914549f72da86dd485a3a708cd86af87bc47d229c
Sha384
469a16df9d2ed7fc40165f0be6c4f192d77d8a16198f67f9129d81c851b2d6254ce3c3d029882204d0e87fc9e6dd6160
Sha512
1189d93ce45ba1966fd29bf4b1960e3f5bd925d538e1e741904dda3162669e4a55797747d3da14bb09f52f7a684bc58f0083a0c74b2b964dd937ad563309273e
SSDeep
49152:6sRMmkWs7b6+TfpNWZAaTuV+Y3tBtfACswy7UagcVLyrb:FWB3EAaS2
TLSH
75A56E17D2E2A8F8CD2BC1B487665732A56174684235F93E26A8DB321F30E70577EB34
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
1 file
EXE45f35fa37276991e28bbedaaf15c1852
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes