Suspect
PE Executable
MD5: 544778a3eb748a2d3b0100c82ffad8d4
Size: 1.22 MB
application/x-dosexec
This sample is a 1.2 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 4 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 98791c948b844813746465deff8af58c8df3ceb9af5b47b36e986e8685de277d
- MD5
- 544778a3eb748a2d3b0100c82ffad8d4
- Verdict
- Inconclusive
- File type
- PE Executable · 1.2 MB
Cite this report: https://app.malva.re/sha256/98791c948b844813746465deff8af58c8df3ceb9af5b47b36e986e8685de277d
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
1.22 MB · 1,215,488 B
First seen
2026-09-28 14:30 · one month ago
Last seen
2026-09-28 14:30 · one month ago
Last analysis
2026-09-28 14:30 · one month ago
Hashes
MD5
544778a3eb748a2d3b0100c82ffad8d4
Sha1
ee2f4aac3b654953f7299946520f1644948f83d0
Sha256
98791c948b844813746465deff8af58c8df3ceb9af5b47b36e986e8685de277d
Sha384
e8874676a63644657f93e98bf7e613987a058a119341b8d8aa1ab548e59e208f3fc45bebbdfdd47086bd3cfb33936525
Sha512
4831668619f434ec8a1680a15472c78d1f41abaf8bad42b5966c788a99ab873fb0dd18141606e0170b07adab828d9668114498d62904ef4c5e36ca92a756c73d
SSDeep
12288:IRmjnOSVF+9dd6eS+Z+YgvXPIFzrSPGiyDxX4bIaXabsJ6rq7JB7jRPIox2sJ+1:+GF+9dd6eXZZeIFzW+x3C5lgLO+
TLSH
78458D13B6D941A9D02EC17487578132EA72BC560B34AAEF0790B3192E7BFE46B3D711
Detection
PeID
Microsoft Visual C++ v6.0 DLL
5 files
EXE544778a3eb748a2d3b0100c82ffad8d4
Structure
BINResources
STICH
beta
No STICH Path has been generated for this analysis yet.
1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
1| Name | Value |
|---|---|
| Info | PDB Path: d:\work\M126_Exp\src\out\runtime_x64\xweb_elf.dll.pdb |