Suspect
PE Executable
MD5: a2c3a596af57f1180298e432ce6a44cb
Size: 2.41 MB
application/x-dosexec
This sample is a 2.3 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 54cd4a919663f089dadd9e8359ce44bb44d75b2914445ac2a128d046dae03e56
- MD5
- a2c3a596af57f1180298e432ce6a44cb
- Verdict
- Inconclusive
- File type
- PE Executable · 2.3 MB
Cite this report: https://app.malva.re/sha256/54cd4a919663f089dadd9e8359ce44bb44d75b2914445ac2a128d046dae03e56
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
2.41 MB · 2,405,376 B
First seen
2026-10-26 18:00 · 6 days ago
Last seen
2026-10-26 18:00 · 6 days ago
Last analysis
2026-10-29 14:43 · 3 days ago
Hashes
MD5
a2c3a596af57f1180298e432ce6a44cb
Sha1
0a847b1fea95c2f75ae3d35ed8cbaad5a4449477
Sha256
54cd4a919663f089dadd9e8359ce44bb44d75b2914445ac2a128d046dae03e56
Sha384
09f5d8a46fb9f84f7f2b43fb8c17501f3afec5c6524af615b7a2bdb498a59332387bbe25447c19f2ee5170e6a464404a
Sha512
6ea71eef09bf5bd569b95d22415ae33eca52176b4de4275dd62a78c9c950392bdbb4d8ecbd1592958b673340c7fb22de8ac19ff3f3b2a0507ca25375b45fecdf
SSDeep
49152:WEocS0NqCL6zOo2ik3g/JtluPk2wD7u9h9pmKYp3Ob0f:/yC+6oZzYR/hM30
TLSH
4CB5330B35AF9253FAF3617820F345B24D4A2CC9CF45DBD69C5698BBC4E1B8D5822274
Detection
PeID
x64 - UPX exe - NRV2E/7 compression Microsoft Visual C++ v6.0 DLL
1 file
EXEa2c3a596af57f1180298e432ce6a44cb
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes