Suspect
PE Executable
MD5: 4963345484d5749f4fc50377964d4132
Size: 3.05 MB
application/x-dosexec
This sample is a 2.9 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 36a454aaab124458e46152f0d590b0bb97f8d704950de4dc001902b382e68f51
- MD5
- 4963345484d5749f4fc50377964d4132
- Verdict
- Inconclusive
- File type
- PE Executable · 2.9 MB
Cite this report: https://app.malva.re/sha256/36a454aaab124458e46152f0d590b0bb97f8d704950de4dc001902b382e68f51
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
3.05 MB · 3,053,056 B
First seen
2026-10-16 10:30 · 11 days ago
Last seen
2026-10-16 10:30 · 11 days ago
Last analysis
2026-10-16 10:30 · 11 days ago
Hashes
MD5
4963345484d5749f4fc50377964d4132
Sha1
9c7759a13950748268720996f18e1260a700632d
Sha256
36a454aaab124458e46152f0d590b0bb97f8d704950de4dc001902b382e68f51
Sha384
6a74c24d578a11821aba7a87790a76ab86a6562de164b380ff7c46a93474c90f47150fcfd779a667933b8a89c49ee198
Sha512
92a8cbffe3c76a5f8c37c7ee235b860d035ad2932b43e61c58ac8d1f4a74338f87c6ff7bdc0c08e61459dfcecb4ef426ae1ccb785367e2e3aec0ff66ce04aea2
SSDeep
49152:I+vOwWcx+HK1bHz5wKfi/Wl20AQvjZbqVys6fAd+oWjJMId9dS9/sampD/zILe:I+vYcxUejziui/g6QNbMyl4I63sac3G
TLSH
A7E5239DBD973971E037C7FB42A730AD726E37A14BB54D4E37C81B242D126282C7A285
Detection
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
1 file
EXE4963345484d5749f4fc50377964d4132
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes