Suspect
PE Executable
MD5: a94c32a3fa4263e38fc8b9c290dc037e
Size: 3.89 MB
application/x-dosexec
This sample is a 3.7 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 33 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 5e38d605b7cadd90534ad48097fb0f40f03d962ae2f21f702d1609ae65a42a20
- MD5
- a94c32a3fa4263e38fc8b9c290dc037e
- Verdict
- Inconclusive
- File type
- PE Executable · 3.7 MB
Cite this report: https://app.malva.re/sha256/5e38d605b7cadd90534ad48097fb0f40f03d962ae2f21f702d1609ae65a42a20
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
3.89 MB · 3,886,238 B
First seen
2026-08-16 01:16 · 2 months ago
Last seen
2026-08-16 01:16 · 2 months ago
Last analysis
2026-08-16 01:16 · 2 months ago
Hashes
MD5
a94c32a3fa4263e38fc8b9c290dc037e
Sha1
412dc61e6dcc2220d6b46043123d25bee2b2a769
Sha256
5e38d605b7cadd90534ad48097fb0f40f03d962ae2f21f702d1609ae65a42a20
Sha384
c5f9233c36cd613cde069047404666a2f4e630240dc83cecd2086ce522ebd955b59c9e50ee08eeff1cbb6f775ab0f8e1
Sha512
f4a5182a63a3111584a6beec4960182c9c3ad370fca35f2a683af5437eae120e2e371d7ef9c37f0e4ab7083070e58687a7e3a3b84dbfe1ff3c379854c45ff947
SSDeep
98304:rKAy+MotzzazKrocjZhzC4/kIiTLmXl89kbniJLpMod:rKuZuwNhz6IILX96Cld
TLSH
5A061205EBA430B9FCB79234CEB387E2DE257806076095E727D4A55B1EBB1D1CA2B311
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
29 files
EXEa94c32a3fa4263e38fc8b9c290dc037e
Structure
RAROverlay_ca7b7ddc.bin
BINResources
STICH
beta
No STICH Path has been generated for this analysis yet.
3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2img
1| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_ca7b7ddc.bin (3405470 bytes) |
| Info | PDB Path: D:\Projects\WinRAR\SFX\build\sfxrar64\Release\sfxrar.pdb |