Suspect
af61297815a226a6e2c7c7cd1a5a961b
PE Executable
MD5: af61297815a226a6e2c7c7cd1a5a961b
Size: 27.44 MB
application/x-dosexec
This sample is a 26.2 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 40 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- c25ba8da48a8c17a82cac22815b051e8a8f7ba18d371627860db312fe29a072d
- MD5
- af61297815a226a6e2c7c7cd1a5a961b
- Verdict
- Inconclusive
- File type
- PE Executable · 26.2 MB
Cite this report: https://app.malva.re/sha256/c25ba8da48a8c17a82cac22815b051e8a8f7ba18d371627860db312fe29a072d
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
27.44 MB · 27,439,792 B
First seen
2026-10-21 01:45 · 12 days ago
Last seen
2026-10-21 01:45 · 12 days ago
Last analysis
2026-10-21 01:45 · 12 days ago
Hashes
MD5
af61297815a226a6e2c7c7cd1a5a961b
Sha1
b59d6d9d41a19dc460bc25252cf1e4e2df3aee12
Sha256
c25ba8da48a8c17a82cac22815b051e8a8f7ba18d371627860db312fe29a072d
Sha384
d3e7e7edda42cf52c5696efc574ee19f6c3c9d747f266d94969df140dc91ab001bb95cf2b8da48c4eece15ed062c80df
Sha512
0a72510687ad44725a0846c1f06d5b76748d0bbd24dc929f05d82f0ab5565214a1a1a20280b7baf27c879e61d6019c9802aee55d6f26b9982f1d67926fdb9959
SSDeep
393216:k3+YKQXK0bBTK4qqr6w9Y/I+H3Fh49xvQLYm/kY0dwhi:k3d5XKSK4/Y/z1haQJIEi
TLSH
FF57A051F70B05F6FF434C3645F9AB2F7B39E29C8974C55AE428242ABAA2C1F45DC290
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamUPolyX 0.3 -> delikon
20 files
EXEaf61297815a226a6e2c7c7cd1a5a961b
Structure
P7B[Authenticode]_03f6cb4d.p7b
BINResources
BINRT_ICON
BINID:0000
BINID:1033
Structure
BINOverlay_1242206a.bin
BIN(folder)
BIN4
BIN19
BIN31
BIN45
BIN57
BIN70
BIN81
BINResources
BINRT_ICON
BINID:0001
IMGID:1033
IMGID:1033-preview.png
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0001
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
BINID:0001
IMGID:1033
IMGID:1033-preview.png
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0001
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
STICH
beta
No STICH Path has been generated for this analysis yet.
6 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
4img
2| Name | Value |
|---|---|
| Info | Authenticode present at 0x1A2AC00 size 1712 bytes |
20 files
EXEaf61297815a226a6e2c7c7cd1a5a961b
Structure
P7B[Authenticode]_03f6cb4d.p7b
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account