Suspicious
Suspect

5f597b4f818cbe5b399cdc0ae99224a0

Share on LinkedIn
Print
PE Executable
MD5: 5f597b4f818cbe5b399cdc0ae99224a0
Size: 3.57 MB
application/x-dosexec

This sample is a 3.4 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 6 embedded or derived files. It matches 7 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
0bc047ddd27f00eed1eef733ed3a114efa64367f59f60281abe6e846dddf5359
MD5
5f597b4f818cbe5b399cdc0ae99224a0
Verdict
Inconclusive
File type
PE Executable · 3.4 MB

Cite this report: https://app.malva.re/sha256/0bc047ddd27f00eed1eef733ed3a114efa64367f59f60281abe6e846dddf5359

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
3.57 MB · 3,567,104 B
First seen
2026-10-23 05:30 · 7 days ago
Last seen
2026-10-23 05:30 · 7 days ago
Last analysis
2026-10-23 05:30 · 7 days ago
Hashes
MD5 5f597b4f818cbe5b399cdc0ae99224a0 Sha1 07e1876e88b117885af5a982a8cc790dbd995b32 Sha256 0bc047ddd27f00eed1eef733ed3a114efa64367f59f60281abe6e846dddf5359 Sha384 88f529b3cc4a5a43d52b8b6293b9949576881d4e3d560fc9540afb8e46d519fc7a39021148a66ca56fb16897cc93e0f6 Sha512 e2dfa0e52e9b4708f7751262d4bd3494de391b2957ac952588e2fbbf0ca98340d522a07fd399e24da43a569ce019cfe7da667f1fee2f04e635c833729832fb56 SSDeep 98304:UgEs64Xwmg0uD6xmCvqcEAqJO0uD6xmCvqcEAqJ:vXM6bvctO6bvct TLSH DFF533D7D2C84AB7CD3A33F4ACB9D229F67061B12706E3931D62D9E3045AB1C255CA93
Detection
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Symbol obfuscation
Low

7 files
EXE5f597b4f818cbe5b399cdc0ae99224a0
Structure
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1img 1

Name Value
Module Name
SultanLauncher.exe
Full Name
SultanLauncher.exe
EntryPoint
System.Void SultanLauncherApp.App::Main()
Scope Name
SultanLauncher.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
SultanLauncher
Assembly Version
0.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
214
Main Method
System.Void SultanLauncherApp.App::Main()
Main IL Instruction Count
64
Main IL 
ldsfld System.String SultanLauncherApp.App::logPath
ldstr --- Launcher Started ---

call System.Void System.IO.File::WriteAllText(System.String,System.String)
leave.s IL_0014: ldstr "Main entered"
pop <null>
leave.s IL_0014: ldstr "Main entered"
ldstr Main entered
call System.Void SultanLauncherApp.App::Log(System.String)
call System.AppDomain System.AppDomain::get_CurrentDomain()
ldsfld System.UnhandledExceptionEventHandler SultanLauncherApp.App::CS$<>9__CachedAnonymousMethodDelegate2
brtrue.s IL_003B: ldsfld System.UnhandledExceptionEventHandler SultanLauncherApp.App::CS$<>9__CachedAnonymousMethodDelegate2
ldnull <null>
ldftn System.Void SultanLauncherApp.App::<Main>b__0(System.Object,System.UnhandledExceptionEventArgs)
newobj System.Void System.UnhandledExceptionEventHandler::.ctor(System.Object,System.IntPtr)
stsfld System.UnhandledExceptionEventHandler SultanLauncherApp.App::CS$<>9__CachedAnonymousMethodDelegate2
ldsfld System.UnhandledExceptionEventHandler SultanLauncherApp.App::CS$<>9__CachedAnonymousMethodDelegate2
callvirt System.Void System.AppDomain::add_UnhandledException(System.UnhandledExceptionEventHandler)
ldstr Instantiating App
call System.Void SultanLauncherApp.App::Log(System.String)
newobj System.Void SultanLauncherApp.App::.ctor()
stloc.0 <null>
ldloc.0 <null>
ldsfld System.Windows.Threading.DispatcherUnhandledExceptionEventHandler SultanLauncherApp.App::CS$<>9__CachedAnonymousMethodDelegate3
brtrue.s IL_006E: ldsfld System.Windows.Threading.DispatcherUnhandledExceptionEventHandler SultanLauncherApp.App::CS$<>9__CachedAnonymousMethodDelegate3
ldnull <null>
ldftn System.Void SultanLauncherApp.App::<Main>b__1(System.Object,System.Windows.Threading.DispatcherUnhandledExceptionEventArgs)
newobj System.Void System.Windows.Threading.DispatcherUnhandledExceptionEventHandler::.ctor(System.Object,System.IntPtr)
stsfld System.Windows.Threading.DispatcherUnhandledExceptionEventHandler SultanLauncherApp.App::CS$<>9__CachedAnonymousMethodDelegate3
ldsfld System.Windows.Threading.DispatcherUnhandledExceptionEventHandler SultanLauncherApp.App::CS$<>9__CachedAnonymousMethodDelegate3
callvirt System.Void System.Windows.Application::add_DispatcherUnhandledException(System.Windows.Threading.DispatcherUnhandledExceptionEventHandler)
ldloc.0 <null>
ldc.i4.1 <null>
callvirt System.Void System.Windows.Application::set_ShutdownMode(System.Windows.ShutdownMode)
ldstr Instantiating MainWindow
call System.Void SultanLauncherApp.App::Log(System.String)
newobj System.Void SultanLauncherApp.MainWindow::.ctor()
stloc.1 <null>
ldstr Running app.Run(window)
call System.Void SultanLauncherApp.App::Log(System.String)
ldloc.0 <null>
ldloc.1 <null>
callvirt System.Int32 System.Windows.Application::Run(System.Windows.Window)
pop <null>
ldstr app.Run() returned cleanly
call System.Void SultanLauncherApp.App::Log(System.String)
leave.s IL_00DE: ret
stloc.2 <null>
ldstr Exception in Main: 
ldloc.2 <null>
callvirt System.String System.Object::ToString()
call System.String System.String::Concat(System.String,System.String)
call System.Void SultanLauncherApp.App::Log(System.String)
ldloc.2 <null>
callvirt System.String System.Object::ToString()
ldstr Launcher Crash Error
ldc.i4.0 <null>
ldc.i4.s 16
call System.Windows.MessageBoxResult System.Windows.MessageBox::Show(System.String,System.String,System.Windows.MessageBoxButton,System.Windows.MessageBoxImage)
pop <null>
leave.s IL_00DC: leave.s IL_00DE
pop <null>
leave.s IL_00DC: leave.s IL_00DE
leave.s IL_00DE: ret
ret <null>
Module Name
SultanLauncher.exe
Full Name
SultanLauncher.exe
EntryPoint
System.Void SultanLauncherApp.App::Main()
Scope Name
SultanLauncher.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
SultanLauncher
Assembly Version
0.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
214
Main Method
System.Void SultanLauncherApp.App::Main()
Main IL Instruction Count
64
Main IL 
ldsfld System.String SultanLauncherApp.App::logPath
ldstr --- Launcher Started ---

call System.Void System.IO.File::WriteAllText(System.String,System.String)
leave.s IL_0014: ldstr "Main entered"
pop <null>
leave.s IL_0014: ldstr "Main entered"
ldstr Main entered
call System.Void SultanLauncherApp.App::Log(System.String)
call System.AppDomain System.AppDomain::get_CurrentDomain()
ldsfld System.UnhandledExceptionEventHandler SultanLauncherApp.App::CS$<>9__CachedAnonymousMethodDelegate2
brtrue.s IL_003B: ldsfld System.UnhandledExceptionEventHandler SultanLauncherApp.App::CS$<>9__CachedAnonymousMethodDelegate2
ldnull <null>
ldftn System.Void SultanLauncherApp.App::<Main>b__0(System.Object,System.UnhandledExceptionEventArgs)
newobj System.Void System.UnhandledExceptionEventHandler::.ctor(System.Object,System.IntPtr)
stsfld System.UnhandledExceptionEventHandler SultanLauncherApp.App::CS$<>9__CachedAnonymousMethodDelegate2
ldsfld System.UnhandledExceptionEventHandler SultanLauncherApp.App::CS$<>9__CachedAnonymousMethodDelegate2
callvirt System.Void System.AppDomain::add_UnhandledException(System.UnhandledExceptionEventHandler)
ldstr Instantiating App
call System.Void SultanLauncherApp.App::Log(System.String)
newobj System.Void SultanLauncherApp.App::.ctor()
stloc.0 <null>
ldloc.0 <null>
ldsfld System.Windows.Threading.DispatcherUnhandledExceptionEventHandler SultanLauncherApp.App::CS$<>9__CachedAnonymousMethodDelegate3
brtrue.s IL_006E: ldsfld System.Windows.Threading.DispatcherUnhandledExceptionEventHandler SultanLauncherApp.App::CS$<>9__CachedAnonymousMethodDelegate3
ldnull <null>
ldftn System.Void SultanLauncherApp.App::<Main>b__1(System.Object,System.Windows.Threading.DispatcherUnhandledExceptionEventArgs)
newobj System.Void System.Windows.Threading.DispatcherUnhandledExceptionEventHandler::.ctor(System.Object,System.IntPtr)
stsfld System.Windows.Threading.DispatcherUnhandledExceptionEventHandler SultanLauncherApp.App::CS$<>9__CachedAnonymousMethodDelegate3
ldsfld System.Windows.Threading.DispatcherUnhandledExceptionEventHandler SultanLauncherApp.App::CS$<>9__CachedAnonymousMethodDelegate3
callvirt System.Void System.Windows.Application::add_DispatcherUnhandledException(System.Windows.Threading.DispatcherUnhandledExceptionEventHandler)
ldloc.0 <null>
ldc.i4.1 <null>
callvirt System.Void System.Windows.Application::set_ShutdownMode(System.Windows.ShutdownMode)
ldstr Instantiating MainWindow
call System.Void SultanLauncherApp.App::Log(System.String)
newobj System.Void SultanLauncherApp.MainWindow::.ctor()
stloc.1 <null>
ldstr Running app.Run(window)
call System.Void SultanLauncherApp.App::Log(System.String)
ldloc.0 <null>
ldloc.1 <null>
callvirt System.Int32 System.Windows.Application::Run(System.Windows.Window)
pop <null>
ldstr app.Run() returned cleanly
call System.Void SultanLauncherApp.App::Log(System.String)
leave.s IL_00DE: ret
stloc.2 <null>
ldstr Exception in Main: 
ldloc.2 <null>
callvirt System.String System.Object::ToString()
call System.String System.String::Concat(System.String,System.String)
call System.Void SultanLauncherApp.App::Log(System.String)
ldloc.2 <null>
callvirt System.String System.Object::ToString()
ldstr Launcher Crash Error
ldc.i4.0 <null>
ldc.i4.s 16
call System.Windows.MessageBoxResult System.Windows.MessageBox::Show(System.String,System.String,System.Windows.MessageBoxButton,System.Windows.MessageBoxImage)
pop <null>
leave.s IL_00DC: leave.s IL_00DE
pop <null>
leave.s IL_00DC: leave.s IL_00DE
leave.s IL_00DE: ret
ret <null>

An error has occurred. This application may no longer respond until reloaded. Reload 🗙