Suspect
PE Executable
MD5: 85bafbe1a5bcf20693e9a6f72f1c657a
Size: 797.7 KB
application/x-dosexec
This sample is a 779 KB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 1f423c42e631e5b57350566821bc0561f9105ec4e9eb055f29f44d0cb5d9aff3
- MD5
- 85bafbe1a5bcf20693e9a6f72f1c657a
- Verdict
- Inconclusive
- File type
- PE Executable · 779 KB
Cite this report: https://app.malva.re/sha256/1f423c42e631e5b57350566821bc0561f9105ec4e9eb055f29f44d0cb5d9aff3
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
797.7 KB · 797,696 B
First seen
2026-09-18 14:30 · one month ago
Last seen
2026-09-18 14:30 · one month ago
Last analysis
2026-09-18 14:30 · one month ago
Hashes
MD5
85bafbe1a5bcf20693e9a6f72f1c657a
Sha1
7a7a0fa3e1bbf042a9e702d053920686c7e5c8dd
Sha256
1f423c42e631e5b57350566821bc0561f9105ec4e9eb055f29f44d0cb5d9aff3
Sha384
7d1c756065a1a1a720f168f29686770f39348b91d050137f5eaa0300bd9978b0244acb9968f64ba65dd48c309a03d66e
Sha512
4a8c2f022118e95ab536708d8c831d7a3a0ec1dbd677a034b60bdd9bdecec9ad993afb1b2d3389fe962fbb4a8d4d3a0b8c6f55b68463b406e633bed2fe01a914
SSDeep
12288:ZSsWuX2hy9dQkIEPYSOdqRThSx4JcjuyxBlDetAqxSv:DG6IEOd+TAmJcCyb
TLSH
42058D1AF3A902E8D0BBC178C9524552EB72B85653309ADF03E15A661F377E06F3EB11
Detection
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12
1 file
EXE85bafbe1a5bcf20693e9a6f72f1c657a
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes
| Name | Value |
|---|---|
| Info | PDB Path: t$di |