Suspect
PE Executable
MD5: 870af744cfdcfbb86a7581cb266fa057
Size: 2.93 MB
application/x-dosexec
This sample is a 2.8 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 78d45a3d9b2e82f6a181d42f6bf9262d2685bafb84a848201a4377c815c2f50c
- MD5
- 870af744cfdcfbb86a7581cb266fa057
- Verdict
- Inconclusive
- File type
- PE Executable · 2.8 MB
Cite this report: https://app.malva.re/sha256/78d45a3d9b2e82f6a181d42f6bf9262d2685bafb84a848201a4377c815c2f50c
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
2.93 MB · 2,929,664 B
First seen
2026-09-03 21:15 · one month ago
Last seen
2026-09-03 21:15 · one month ago
Last analysis
2026-09-03 21:15 · one month ago
Hashes
MD5
870af744cfdcfbb86a7581cb266fa057
Sha1
8ff2166ccb0d10b97526717ea292ceac18691349
Sha256
78d45a3d9b2e82f6a181d42f6bf9262d2685bafb84a848201a4377c815c2f50c
Sha384
ae2380f232621f0ce16ed363d4bdf8e57fb801ea70ba22435a7d1856c0b013f66d0a8cae563f0c91fd9accb13889fe77
Sha512
aee349cbcae67949d22bc4ca688040cb9ff8666abdd81bd76785db8c4be753a801010c540668cd676d7c02ae221713480e6079038efd35ba98bba7aa203cd3a5
SSDeep
49152:CFM3jEOLhF8bkgQSjJhi2ntLlm6QwLltQVrtYYHVeJsXFsdQbK4lhNS4Yen:C+TE2hFWBTi2jLQwB2YYVeJX+
TLSH
05D52399A5B69E74C8B7C3B58F52F4BDB02D3BA44B748E8B77CC68145E126441C3A3B0
Detection
PeID
Microsoft Visual C++ v6.0 DLL
1 file
EXE870af744cfdcfbb86a7581cb266fa057
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes