Suspect
PE Executable
MD5: 8c28e2efde4d6215c21835af6525c520
Size: 312.54 KB
application/x-dosexec
This sample is a 305.2 KB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- f05cd257c23cd9b39db02dd7457aaf25584129aac2b5feb7286614f721dadb2f
- MD5
- 8c28e2efde4d6215c21835af6525c520
- Verdict
- Inconclusive
- File type
- PE Executable · 305.2 KB
Cite this report: https://app.malva.re/sha256/f05cd257c23cd9b39db02dd7457aaf25584129aac2b5feb7286614f721dadb2f
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
312.54 KB · 312,536 B
First seen
2026-06-29 20:46 · 4 months ago
Last seen
2026-06-29 20:46 · 4 months ago
Last analysis
2026-07-01 09:05 · 4 months ago
Hashes
MD5
8c28e2efde4d6215c21835af6525c520
Sha1
8b68875c094ab2e217fc4d957ed17d575bc5dc93
Sha256
f05cd257c23cd9b39db02dd7457aaf25584129aac2b5feb7286614f721dadb2f
Sha384
63a7d7f14633f8511c95fba887250892ff612c0d59436e01594db3cc3fe0130a40dd2966fa4331f76d18c99937628ffa
Sha512
cb0a6126ef4aa6afce3ce5d593794d0ba156d2dd67aa328fda1794b1ec133bdf7f61af29daa09be041965246af4136afe99f871b5cecb5624fdb2a926c0d99f5
SSDeep
6144:amlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9:p1iw7gryNkSV1hy1Z1u2JLu9
TLSH
72646C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B6F
Detection
PeID
MASM/TASM - sig4 (h)Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
3 files
EXE8c28e2efde4d6215c21835af6525c520
Structure
P7B[Authenticode]_2e0effeb.p7b
BINResources
| Name | Value |
|---|---|
| Info | Authenticode present at 0x49800 size 11480 bytes |
| Info | PDB Path: C:\builds\cc\cwcontrol\Product\ClickOnceRunner\Release\ClickOnceRunner.pdb |