Suspect
PE Executable
MD5: 4e3047fc96e4a267b77694aa363accb2
Size: 5.3 MB
application/x-dosexec
This sample is a 5.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 383f6b988e0571e090ae3ec4fac8ec2a35e781fb0312086d66a0900400952cd9
- MD5
- 4e3047fc96e4a267b77694aa363accb2
- Verdict
- Inconclusive
- File type
- PE Executable · 5.1 MB
Cite this report: https://app.malva.re/sha256/383f6b988e0571e090ae3ec4fac8ec2a35e781fb0312086d66a0900400952cd9
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.3 MB · 5,298,176 B
First seen
2026-10-03 05:30 · 26 days ago
Last seen
2026-10-03 05:30 · 26 days ago
Last analysis
2026-10-03 05:30 · 26 days ago
Hashes
MD5
4e3047fc96e4a267b77694aa363accb2
Sha1
0fd330919866404dd42eabcc1454f7fd03e9ac18
Sha256
383f6b988e0571e090ae3ec4fac8ec2a35e781fb0312086d66a0900400952cd9
Sha384
9f5eb9ba863e11160219818a525f596ff368e07a4c06b586e2a9a6c00d00ae067b77c3103be05a01b0ef6e0fc21e7cfb
Sha512
242816370a3febc8e31acbbfe50402ca1380817a98ce14dcc7116f1eafa0f8ca71e56b5b45d62c36abd71e9ab64e3ede1e276db20b49708077aae87b7a180f3f
SSDeep
6144:jIYVTH5DgSgmE9l9yUqIYVTH5DgSg8ajldktM0XXrC2QhMV9qEBLIwYQuy8DLq12:jbLgmvbLgPlu7QhMbpIMu7L5N
TLSH
4336E00A33AC80BCD456423598A35E35E7B3BC565278970F5B58CB6A0E63390BF78B17
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) UPolyX 0.3 -> delikon
1 file
EXE4e3047fc96e4a267b77694aa363accb2
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential