Suspect
PE Executable
MD5: a435d6c5f9780c325f01ae1e13d8e7e6
Size: 2.06 MB
application/x-dosexec
This sample is a 2 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- ed404b104008ed091ee3bf996d419b4a7ec3d65bdce1af8ae8196b94d4638d06
- MD5
- a435d6c5f9780c325f01ae1e13d8e7e6
- Verdict
- Inconclusive
- File type
- PE Executable · 2 MB
Cite this report: https://app.malva.re/sha256/ed404b104008ed091ee3bf996d419b4a7ec3d65bdce1af8ae8196b94d4638d06
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
2.06 MB · 2,062,336 B
First seen
2026-07-26 05:45 · 3 months ago
Last seen
2026-07-26 05:45 · 3 months ago
Last analysis
2026-07-26 15:29 · 3 months ago
Hashes
MD5
a435d6c5f9780c325f01ae1e13d8e7e6
Sha1
afc7b16b2edd11af270ad4faa23567d4d2e867a3
Sha256
ed404b104008ed091ee3bf996d419b4a7ec3d65bdce1af8ae8196b94d4638d06
Sha384
e51c3993b6bc542305a58b90173943bc7267eb4944f8d64af9039d227bbda495a44b2c0c53d29e2cb56f95de8518aee0
Sha512
2a722f19b517fca22ce0d6b327cb592cc72d071511915a7c2f45e2bd0ac74d08602ce699b24ad023c7ab8470e37ed65efb986278c532fa4d56cbefe21050c3c5
SSDeep
49152:jnYnjQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SA9:DI8qPoBhz1aRxcSUDk36SA9
TLSH
AAA5235932BC81FCC006257944B78E67E7B37C9A13FE6A0F8B404AAA1E13755BF64742
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) UPolyX 0.3 -> delikon
1 file
EXEa435d6c5f9780c325f01ae1e13d8e7e6
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential