Suspect
PE Executable
MD5: 5e23b5ac24ce24866ac50d70f0fc4a80
Size: 3.02 MB
application/x-dosexec
This sample is a 2.9 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- effe9a34b0d6663e9ca76d54047073d70f419b99379314d466e61909dcec3b14
- MD5
- 5e23b5ac24ce24866ac50d70f0fc4a80
- Verdict
- Inconclusive
- File type
- PE Executable · 2.9 MB
Cite this report: https://app.malva.re/sha256/effe9a34b0d6663e9ca76d54047073d70f419b99379314d466e61909dcec3b14
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
3.02 MB · 3,022,336 B
First seen
2026-08-05 15:45 · 2 months ago
Last seen
2026-08-05 15:45 · 2 months ago
Last analysis
2026-08-05 21:37 · 2 months ago
Hashes
MD5
5e23b5ac24ce24866ac50d70f0fc4a80
Sha1
0b1edcd4fd88b6b104bb23244f452ff15b463d2d
Sha256
effe9a34b0d6663e9ca76d54047073d70f419b99379314d466e61909dcec3b14
Sha384
634f40b20fb59044c30c67960bc7549affd57e722404948e93802fe70f6a07b92506fee005fdbd3ab082e696e2c2bff0
Sha512
76f525cf275fcdc3cdb67681d1f81d2060272be6090d3e2210020250206700c771003083eb693e876322b79aa26285b26f6c937540d0cdbfa9a1dfca62028e12
SSDeep
49152:bVtagah3BvXbDD8NYS0TgmQvDuA+vZjvpzeyrkURnUk6apR60F7:JwbvMY5jQLuA+vZjhzey4GUkLR6K
TLSH
71E5239CBCD23EB5E032C7B757A725AEB22A379046B44C8E35D927105C235186CB736D
Detection
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
1 file
EXE5e23b5ac24ce24866ac50d70f0fc4a80
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes