Suspect
PE Executable
MD5: 60c6121c1fa2c58cb7d8cfc31241726a
Size: 1.15 MB
application/x-dosexec
This sample is a 1.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 11 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 292aecf5653d322d47c2535d44fc63eb3dfc3efad2fa5eb3e52fec2333f50510
- MD5
- 60c6121c1fa2c58cb7d8cfc31241726a
- Verdict
- Inconclusive
- File type
- PE Executable · 1.1 MB
Cite this report: https://app.malva.re/sha256/292aecf5653d322d47c2535d44fc63eb3dfc3efad2fa5eb3e52fec2333f50510
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
1.15 MB · 1,154,560 B
First seen
2026-10-21 21:30 · 10 days ago
Last seen
2026-10-21 21:30 · 10 days ago
Last analysis
2026-10-21 21:30 · 10 days ago
Hashes
MD5
60c6121c1fa2c58cb7d8cfc31241726a
Sha1
5cd016e62882bcd7330448f2f18283cacf5f432c
Sha256
292aecf5653d322d47c2535d44fc63eb3dfc3efad2fa5eb3e52fec2333f50510
Sha384
a82732c7b032349ad0f7e3b2c4917159c7d398e0e6c71b8af4ec0adb09cc8316f6034313f72da39dc10b9d44585bc0c3
Sha512
64aa19d7a4aa1acd66b59b5251610b573cd36325fa401e0b3283983982329ca58051fe7509b6b749b4a8ef97b4f3c6cf71a326cfad13228df3d596c5efa8613a
SSDeep
12288:BDnpM62MHGlgmetPHvAdTrJIgFyraXOr2x+rt/oLqo+Ddt4JukvROnCHEmk+ZiEi:pnpM62P0HvGo2X6j/oOJp+OCHxkYiE6
TLSH
10357A41A7951DBCFD3684344512F5F295ED78323AE0D4AE424C260F0936FAFAAF5A13
Detection
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
12 files
EXE60c6121c1fa2c58cb7d8cfc31241726a
Structure
BINResources
STICH
beta
No STICH Path has been generated for this analysis yet.
2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
1img
1| Name | Value |
|---|---|
| Info | PDB Path: estonia.pdb |