Suspicious
Suspect

4a216a672bd1bad154e72a0c426e40ed

PE Executable
MD5: 4a216a672bd1bad154e72a0c426e40ed
Size: 27.15 MB
application/x-dosexec

This sample is a 25.9 MB PE Executable. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature among its 403 YARA rules. Static analysis extracted 9 embedded or derived files. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.

SHA256
a5af40be1fc27f878aeff4bd0e86094d22037c8debb72d55ceaae9464b8bd120
MD5
4a216a672bd1bad154e72a0c426e40ed
Verdict
No known threat found
File type
PE Executable · 25.9 MB

Cite this report: https://app.malva.re/sha256/a5af40be1fc27f878aeff4bd0e86094d22037c8debb72d55ceaae9464b8bd120

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
27.15 MB · 27,147,944 B
First seen
2026-10-22 02:45 · 12 days ago
Last seen
2026-10-22 02:45 · 12 days ago
Last analysis
2026-10-22 02:45 · 12 days ago
Hashes
MD5 4a216a672bd1bad154e72a0c426e40ed Sha1 8e2677aec82fdd0f22f8f8159bb90d98ceeb84b3 Sha256 a5af40be1fc27f878aeff4bd0e86094d22037c8debb72d55ceaae9464b8bd120 Sha384 e3f3e2149813d160ff9efcb63549e2922cbdcf315cb54a0799e754e56b288ef0c37c5689bb356d7fc4ddcf865d346512 Sha512 200fa9ceb278246a372d261edd0b948c0cc34b6be0f2ffc5ef3526b421f2cb56900b4b913ee2208773a7aa4677b440f3ee78b467b14cbd77155ed97808a6e21c SSDeep 393216:5UkFU2gP19bWU9faLwZwkNdctlvXm/AmvR6RFaIVqVN5W5GVO:1qtz7wkNCtZXEAmc/Jl TLSH C15701286347C1EBC3668230D96CA7F1FD2D8D64E108892BD799BD7D3DB1C2A58C52E1
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamUPolyX 0.3 -> delikon

10 files
EXE4a216a672bd1bad154e72a0c426e40ed
Structure
P7B[Authenticode]_2ff49adb.p7b
BINResources
BINRT_ICON
BINID:0001
BINID:1033
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINID:0006
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0001
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2

Name Value
Info
Authenticode present at 0x19E3848 size 1632 bytes

10 files
EXE4a216a672bd1bad154e72a0c426e40ed
Structure
P7B[Authenticode]_2ff49adb.p7b
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙