Suspect
PE Executable
MD5: 99088294d431c0b4b63269202dba2d00
Size: 5.3 MB
application/x-dosexec
This sample is a 5.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- ae5ce4d540d6decaca5aa836d2e53b5b1067a53c61a6df88c5498c7b04f0827a
- MD5
- 99088294d431c0b4b63269202dba2d00
- Verdict
- Inconclusive
- File type
- PE Executable · 5.1 MB
Cite this report: https://app.malva.re/sha256/ae5ce4d540d6decaca5aa836d2e53b5b1067a53c61a6df88c5498c7b04f0827a
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.3 MB · 5,298,176 B
First seen
2026-10-06 05:30 · 27 days ago
Last seen
2026-10-06 05:30 · 27 days ago
Last analysis
2026-10-06 05:30 · 27 days ago
Hashes
MD5
99088294d431c0b4b63269202dba2d00
Sha1
08932d441b67fef7577c8aed7a57a5b57e3ea9cb
Sha256
ae5ce4d540d6decaca5aa836d2e53b5b1067a53c61a6df88c5498c7b04f0827a
Sha384
044548d849e8e9d8cd114bc92f1f2af9f92305c5204dc4f4f3baad8774d2643efa4c31eb89bb96a454e9ed2d3778cff5
Sha512
397ee5f5d2f6a67e56702f02e27b55218e6c1dab0ff5e9f40e80eb286d1a5ab6b6047996cd2cb37b70c90726f843368884008a2ca3d47a2fa066ff2fccd7bff3
SSDeep
24576:jbLgBbLgu4QhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626M+:jnsnoQqMSPbcBVQej/1INRx+
TLSH
1236235E32BC91BCD007233594B78E26E6B37C5A22B99B0F4B4486761E03795AF64B13
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) UPolyX 0.3 -> delikon
1 file
EXE99088294d431c0b4b63269202dba2d00
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential