Suspicious
Suspect

7e4eb2e43fdc0561d51176654b07f133

Share on LinkedIn
Print
PE Executable
MD5: 7e4eb2e43fdc0561d51176654b07f133
Size: 1.16 MB
application/x-dosexec

This sample is a 1.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 9 embedded or derived files. It matches 6 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
32a186d26a7797d3c68cfec5edb7dc580dfcc3e71523e26b036a3d8a1815a3be
MD5
7e4eb2e43fdc0561d51176654b07f133
Verdict
Inconclusive
File type
PE Executable · 1.1 MB

Cite this report: https://app.malva.re/sha256/32a186d26a7797d3c68cfec5edb7dc580dfcc3e71523e26b036a3d8a1815a3be

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
1.16 MB · 1,159,168 B
First seen
2026-10-19 07:45 · 12 days ago
Last seen
2026-10-19 07:45 · 12 days ago
Last analysis
2026-10-19 07:46 · 12 days ago
Hashes
MD5 7e4eb2e43fdc0561d51176654b07f133 Sha1 889468cb24a5b80c8ae4e691c312d737f0d5338d Sha256 32a186d26a7797d3c68cfec5edb7dc580dfcc3e71523e26b036a3d8a1815a3be Sha384 981bc78bffae9e9337ef6bd6e4f8aaef109d472c67310b96d894be898ba616b0ba6a531548286b1ffb14ca8f5e70445a Sha512 88c8ed5800e45e1ddb4b1863c8ec9bfb07f26923e33176fd116c4bca0e1d0b1618fe02cb1e5652dc465ab1bb411e96f853a1559396406a779dd76d946e4dd2e7 SSDeep 24576:6ay2gM2WsXhv9CC2kTADkA9z0mdXaVh1k3WMAGhPLtS4LLoe8j:6fvJTRvQ8TADkcRXwh1iW0zJL0vj TLSH B9350215226ECE06C4A64FF40932F6B41B395ED9A921D217DFEA7EEFB93E7211500342
Detection
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Symbol obfuscation
Low

10 files
EXE7e4eb2e43fdc0561d51176654b07f133
Structure
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1

Name Value
Module Name
OPgJ.exe
Full Name
OPgJ.exe
EntryPoint
System.Void BakeryOven.Program::Main()
Scope Name
OPgJ.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
OPgJ
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
367
Main Method
System.Void BakeryOven.Program::Main()
Main IL Instruction Count
10
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void BakeryOven.NavigationForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Module Name
OPgJ.exe
Full Name
OPgJ.exe
EntryPoint
System.Void BakeryOven.Program::Main()
Scope Name
OPgJ.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
OPgJ
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
367
Main Method
System.Void BakeryOven.Program::Main()
Main IL Instruction Count
10
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void BakeryOven.NavigationForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>

An error has occurred. This application may no longer respond until reloaded. Reload 🗙