Suspect
PE Executable
MD5: afaf3d534dfdb96401493ff3a8b27f26
Size: 27.29 MB
application/x-dosexec
This sample is a 26 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 40 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- b4a60551ca30298c4e8f225aea012cdc34aaaaf640d9c7ee0818860c74ffab19
- MD5
- afaf3d534dfdb96401493ff3a8b27f26
- Verdict
- Inconclusive
- File type
- PE Executable · 26 MB
Cite this report: https://app.malva.re/sha256/b4a60551ca30298c4e8f225aea012cdc34aaaaf640d9c7ee0818860c74ffab19
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
27.29 MB · 27,294,384 B
First seen
2026-10-22 03:30 · 9 days ago
Last seen
2026-10-22 03:30 · 9 days ago
Last analysis
2026-10-22 03:30 · 9 days ago
Hashes
MD5
afaf3d534dfdb96401493ff3a8b27f26
Sha1
7afc0158fe33c770fbee71818b703f775a6aa3e2
Sha256
b4a60551ca30298c4e8f225aea012cdc34aaaaf640d9c7ee0818860c74ffab19
Sha384
774a8b336a3ac661b5108b39a860c76b6d83692b9fee23d93e1b072577a18512245bd9e985819030a5c4a297fa50ba14
Sha512
1c7ba1b121c96b659060ac37ff5420ae1c37f6a8469198da18cbb2d1cd638af7ce8e00f268c77194416c237c1471ea3e862a387616ba308dc3816db16c9d59c7
SSDeep
393216:p61bIHOGJ6hxM35+yM1GIe5sg2aheUGHLW:p6RIuGJKMpYsV5sg2ahvCW
TLSH
BE57AF51B30B55F6FA434C3685F9AB7F7B35EE9CC874C557E428382AB9B2C1A458C280
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft Team
20 files
EXEafaf3d534dfdb96401493ff3a8b27f26
Structure
P7B[Authenticode]_c5f58c2b.p7b
BINResources
STICH
beta
No STICH Path has been generated for this analysis yet.
5 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
4img
1| Name | Value |
|---|---|
| Info | Authenticode present at 0x1A07400 size 1712 bytes |