Suspect
52c1c5a23e2590702fd69d2a3ec6d59a
PE Executable
MD5: 52c1c5a23e2590702fd69d2a3ec6d59a
Size: 5.3 MB
application/x-dosexec
This sample is a 5.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 0c04ce5cd7f7ebfd12f9639f2bcb7dcd93b18f3706e394e3228e0fdbae4ebcb5
- MD5
- 52c1c5a23e2590702fd69d2a3ec6d59a
- Verdict
- Inconclusive
- File type
- PE Executable · 5.1 MB
Cite this report: https://app.malva.re/sha256/0c04ce5cd7f7ebfd12f9639f2bcb7dcd93b18f3706e394e3228e0fdbae4ebcb5
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.3 MB · 5,298,176 B
First seen
2026-10-21 22:15 · 6 days ago
Last seen
2026-10-21 22:15 · 6 days ago
Last analysis
2026-10-21 22:15 · 6 days ago
Hashes
MD5
52c1c5a23e2590702fd69d2a3ec6d59a
Sha1
7f6571a627f64b8d25f93d7ebe4d5330a98d66dd
Sha256
0c04ce5cd7f7ebfd12f9639f2bcb7dcd93b18f3706e394e3228e0fdbae4ebcb5
Sha384
77ce9580679554a76167b9913c16ded366ee6df04e2a1b78a3becb2e5d87aacd34b0c211bd10818710e97f7b48f3f451
Sha512
2ba5e62d21972128e8a51d83d294bcf9a326a61e9cb70d57afc35bfc3c1afc1d666ca7b2ffab1b9d9d1e4bd46504de241884cbd184678e1709189741cdf2ff3b
SSDeep
98304:DlDqPoBhz1aRxcSUDk36SAEdhvxWa9P59Uc/J:DlDqPe1Cxcxk3ZAEUadv
TLSH
98362322E11851B5E09305F404EFAB26E2BF3C2017B795CBAB54466A5C227E77B34F4B
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) UPolyX 0.3 -> delikon
1 file
EXE52c1c5a23e2590702fd69d2a3ec6d59a
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential1 file
EXE52c1c5a23e2590702fd69d2a3ec6d59a
No malware configuration was found at this point.
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
52c1c5a23e2590702fd69d2a3ec6d59a
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account