Suspect
PE Executable
MD5: 52c1c5a23e2590702fd69d2a3ec6d59a
Size: 5.3 MB
application/x-dosexec
This sample is a 5.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 0c04ce5cd7f7ebfd12f9639f2bcb7dcd93b18f3706e394e3228e0fdbae4ebcb5
- MD5
- 52c1c5a23e2590702fd69d2a3ec6d59a
- Verdict
- Inconclusive
- File type
- PE Executable · 5.1 MB
Cite this report: https://app.malva.re/sha256/0c04ce5cd7f7ebfd12f9639f2bcb7dcd93b18f3706e394e3228e0fdbae4ebcb5
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.3 MB · 5,298,176 B
First seen
2026-10-21 22:15 · 6 days ago
Last seen
2026-10-21 22:15 · 6 days ago
Last analysis
2026-10-21 22:15 · 6 days ago
Hashes
MD5
52c1c5a23e2590702fd69d2a3ec6d59a
Sha1
7f6571a627f64b8d25f93d7ebe4d5330a98d66dd
Sha256
0c04ce5cd7f7ebfd12f9639f2bcb7dcd93b18f3706e394e3228e0fdbae4ebcb5
Sha384
77ce9580679554a76167b9913c16ded366ee6df04e2a1b78a3becb2e5d87aacd34b0c211bd10818710e97f7b48f3f451
Sha512
2ba5e62d21972128e8a51d83d294bcf9a326a61e9cb70d57afc35bfc3c1afc1d666ca7b2ffab1b9d9d1e4bd46504de241884cbd184678e1709189741cdf2ff3b
SSDeep
98304:DlDqPoBhz1aRxcSUDk36SAEdhvxWa9P59Uc/J:DlDqPe1Cxcxk3ZAEUadv
TLSH
98362322E11851B5E09305F404EFAB26E2BF3C2017B795CBAB54466A5C227E77B34F4B
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) UPolyX 0.3 -> delikon
1 file
EXE52c1c5a23e2590702fd69d2a3ec6d59a
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential