Suspicious
Suspect

4fdcf56964bbc3a2c9848c05f00f9b56

Share on LinkedIn
Print
PE Executable
MD5: 4fdcf56964bbc3a2c9848c05f00f9b56
Size: 4.61 KB
application/x-dosexec

This sample is a 4.5 KB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
1740beac423979afea7496e51ea5f2e28b0f920ad92bb2ed12a81bd801ac5e0c
MD5
4fdcf56964bbc3a2c9848c05f00f9b56
Verdict
Inconclusive
File type
PE Executable · 4.5 KB

Cite this report: https://app.malva.re/sha256/1740beac423979afea7496e51ea5f2e28b0f920ad92bb2ed12a81bd801ac5e0c

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
4.61 KB · 4,608 B
First seen
2026-10-10 00:15 · 19 days ago
Last seen
2026-10-10 00:15 · 19 days ago
Last analysis
2026-10-10 00:15 · 19 days ago
Hashes
MD5 4fdcf56964bbc3a2c9848c05f00f9b56 Sha1 426592ad06d9af565a5be17c2e4587375f0db704 Sha256 1740beac423979afea7496e51ea5f2e28b0f920ad92bb2ed12a81bd801ac5e0c Sha384 0568a5b477780575f5dbcc9c238d9c4ed8f9e9530349d5a9e99e49494740dcd82dc548bd5706d9a9c7419c7434102265 Sha512 654c230f757a07276d4de657739d24956f12d9363bda5cd0b98856809c63897ce7e4a67564f386a4b719c9383520ac7448cca99d74c8ff83728da5a97288d2e3 SSDeep 48:6IIF9BlQaexG69gZ07An0cF5uduvxRxUjbON9XM/ge93ahr0/:y9BOaMGBd0cF50uDxUOvXeg TLSH 7891D74270B989E7E85D85BF4C0FB8A0B919740A41C483A70378A5953F3A57BF47CB0D

1 file
EXE4fdcf56964bbc3a2c9848c05f00f9b56
Structure
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes

Name Value
Info
PDB Path: t$mn

An error has occurred. This application may no longer respond until reloaded. Reload 🗙