Suspect
PE Executable
MD5: 93f1aead2d1b4dadd6328c28876b4481
Size: 815.62 KB
application/x-dosexec
This sample is a 796.5 KB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 6d4df4cf4ab532a47a7ab095ac84f82eb56e28bab41db2d51ab013e21c940e90
- MD5
- 93f1aead2d1b4dadd6328c28876b4481
- Verdict
- Inconclusive
- File type
- PE Executable · 796.5 KB
Cite this report: https://app.malva.re/sha256/6d4df4cf4ab532a47a7ab095ac84f82eb56e28bab41db2d51ab013e21c940e90
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
815.62 KB · 815,616 B
First seen
2026-10-17 12:00 · 13 days ago
Last seen
2026-10-17 12:00 · 13 days ago
Last analysis
2026-10-17 12:00 · 13 days ago
Hashes
MD5
93f1aead2d1b4dadd6328c28876b4481
Sha1
890def6a724bd99ef1c1abb778f544866846c725
Sha256
6d4df4cf4ab532a47a7ab095ac84f82eb56e28bab41db2d51ab013e21c940e90
Sha384
d1d4b65fe28adf4fe96d0b3d989de27627cd09a54f4d168d5c0fcac9c2435236b508d2ab257f2ca2757e6e804c6485bd
Sha512
517d368ef2bc8893244f60b8230d84f86feb0761d7c117c5fc84b58dafcfb5eac647edcb9172947787f5ddf27e6b415191a00a6d4e9c9629e8d8bba5b2993ae4
SSDeep
12288:DyHyRYijGiidUUpKYDGgr4Hl1Yx8+UXIHoA2wGXxK8+U:Dkii/pKYD0Hl1YGXYD2/xTX
TLSH
6105D0816B6AC461D13A8C7E6BFCB2C951D6DDB7CE303F6B339129CE887026C2315596
Detection
PeID
Microsoft Visual C++ v6.0 DLLSafeguard 1.03 -> Simonzh
1 file
EXE93f1aead2d1b4dadd6328c28876b4481
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes
| Name | Value |
|---|---|
| Info | PDB Path: t$di |