Suspect
PE Executable
MD5: 874c713546c21ca87434f1440843338e
Size: 6.47 MB
application/x-dosexec
This sample is a 6.2 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 32 embedded or derived files. It matches 6 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 493611327d5d4fe06460977a0295586a9a67434ffc90282a69028fa1f12e3ce9
- MD5
- 874c713546c21ca87434f1440843338e
- Verdict
- Inconclusive
- File type
- PE Executable · 6.2 MB
Cite this report: https://app.malva.re/sha256/493611327d5d4fe06460977a0295586a9a67434ffc90282a69028fa1f12e3ce9
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
6.47 MB · 6,468,420 B
First seen
2026-10-04 04:30 · 23 days ago
Last seen
2026-10-04 04:30 · 23 days ago
Last analysis
2026-10-04 04:30 · 23 days ago
Hashes
MD5
874c713546c21ca87434f1440843338e
Sha1
3be04f3ded6c292d6dbb1344dc9b53d82a6a31f1
Sha256
493611327d5d4fe06460977a0295586a9a67434ffc90282a69028fa1f12e3ce9
Sha384
8ef18adda952aab8383716f3317e0fa18e9d5bc398038826297fd0a42f68f83a7a1130290115fa97a51da5fdc0d92049
Sha512
f9048cc057feede1bd044b5e0b5d5531e88df8f64ecdddb0a315b5cd9a9741633240fa3af6e11f176e4bfdd9320dc11a2248def2c2cfbdc1ca3e82b6281b4b80
SSDeep
196608:p+/eDsP+5nwoADtJmUrVkcKd9o0xQ4TWeVM1/b:p+/eDheoADJrVkcM9qKMhb
TLSH
2B563322BBE406BBF2B21270A93353A05BFFBC344B75455B97A055888F728F5C4A8357
Detection
PeID
Borland Delphi 4.0Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
32 files
EXE874c713546c21ca87434f1440843338e
Structure
BINOverlay_f278a751.bin
DLLIKernel.dll
DLLctor.dll
DLLIScript.dll
DLLIUser.dll
DLLobjectps.dll
EXEDotNetInstaller.exe
RGSiKernel.rgs
TLBISProBE9x.tlb
TLBISProBENT.tlb
BINResources
STICH
beta
No STICH Path has been generated for this analysis yet.
5 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
5| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_f278a751.bin (6426948 bytes) |