Suspect
PE Executable
MD5: 858d6d91e6d04cb26acb51fcb516f9c1
Size: 15.32 MB
application/x-dosexec
This sample is a 14.6 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 21 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 0d4755125431b2df6a5232950b6c475bb6ae459a35503d64a6bc2c8075f5e2e5
- MD5
- 858d6d91e6d04cb26acb51fcb516f9c1
- Verdict
- Inconclusive
- File type
- PE Executable · 14.6 MB
Cite this report: https://app.malva.re/sha256/0d4755125431b2df6a5232950b6c475bb6ae459a35503d64a6bc2c8075f5e2e5
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
15.32 MB · 15,318,651 B
First seen
2026-08-08 16:01 · 2 months ago
Last seen
2026-08-08 16:01 · 2 months ago
Last analysis
2026-08-08 16:01 · 2 months ago
Hashes
MD5
858d6d91e6d04cb26acb51fcb516f9c1
Sha1
6790e1cbf6798382504915d09bbf8b5aacc10dfe
Sha256
0d4755125431b2df6a5232950b6c475bb6ae459a35503d64a6bc2c8075f5e2e5
Sha384
1f5ca1cf8943266919ed4c202d938973b1e6e198c3c0c66974b8655ca7361c4790e73da81539b3018bab75534c7a700e
Sha512
9c38f256706683f6780032f06d7b15a34481cb2cb9c65e9cb2e57adbb5e521e2165d49edfc3302b18c249b4afe76c28cd90e35465356a0a9b8cbb5d741b48700
SSDeep
393216:xxVCkFeObsJGHu9zwkXiJlrWqMudtVzBNdzV3:xxV7FtluRXFxudrzlR
TLSH
C2F6334225E634E7F273A3B47C7BA9386A13CC359AA707A00384F5E5BC5574528B72CB
Detection
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
22 files
EXE858d6d91e6d04cb26acb51fcb516f9c1
Structure
BINOverlay_d8972026.bin
BINResources
STICH
beta
No STICH Path has been generated for this analysis yet.
3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2img
1| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_d8972026.bin (15213691 bytes) |