Suspect
PE Executable
MD5:
Size: 0 B
application/x-dosexec
The file 79e79a6794317d2fee678cbc0a535047 is a PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 1 embedded or derived file. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- —
- MD5
- -
- Verdict
- Inconclusive
- File type
- PE Executable
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Detection
PeID
Microsoft Visual C++ v6.0 DLLNullsoft PiMP Stub -> SFX
2 files
EXE79e79a6794317d2fee678cbc0a535047
BINOverlay_ca264b5c.bin
| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_ca264b5c.bin (1055637 bytes) |
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential