Suspect
PE Executable
MD5: 5797b1baac5b5f25d725ed634d0183c4
Size: 3 MB
application/x-dosexec
This sample is a 2.9 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- ae2f0e601afed431215b7949143f594d0af98be324475b86c6ab4e7dfa6a0ff4
- MD5
- 5797b1baac5b5f25d725ed634d0183c4
- Verdict
- Inconclusive
- File type
- PE Executable · 2.9 MB
Cite this report: https://app.malva.re/sha256/ae2f0e601afed431215b7949143f594d0af98be324475b86c6ab4e7dfa6a0ff4
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
3 MB · 3,004,928 B
First seen
2026-09-05 21:15 · one month ago
Last seen
2026-09-05 21:15 · one month ago
Last analysis
2026-09-05 21:15 · one month ago
Hashes
MD5
5797b1baac5b5f25d725ed634d0183c4
Sha1
19e2ab839d6b2b7f9a9d7a0b3586778c1ff98fa5
Sha256
ae2f0e601afed431215b7949143f594d0af98be324475b86c6ab4e7dfa6a0ff4
Sha384
6a9399814995313a8a051963de984512044fd951977a27e8c26bd4a2ad133cd2ecf3fb231ea1dd423148ba787d9e9323
Sha512
ef0dcbc2bedd9aae44596b8c11d78a5bd9e509dce0ccceb710c7003b8e14e60f1ab0de8168fcf96c10f50dbd45526be5f075705ac98c3d47c0d1cfc57f29723f
SSDeep
49152:ZLr53+GpTLixcu8Hu2AgME412j/KsLFHyqQ4dMm/5Z/YaDCORWL7yVWweZChz0P+:ZLr5pTGGO2AgME4Uj/KERm4dXeBOREeg
TLSH
61D52399BDB25AB1D076C37A9D87E03DB12D3B558B718D8372CD6B004D238642C7A27E
Detection
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
1 file
EXE5797b1baac5b5f25d725ed634d0183c4
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes