Suspicious
Suspect

afb477b02aa1cfb5dd7a9267a99f2c31

Share on LinkedIn
Print
PE Executable
MD5: afb477b02aa1cfb5dd7a9267a99f2c31
Size: 5.22 MB
application/x-dosexec

This sample is a 5 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
f91b79e3699ef2eb397f65717116da36f978126b78786b260466fc9e1390afef
MD5
afb477b02aa1cfb5dd7a9267a99f2c31
Verdict
Inconclusive
File type
PE Executable · 5 MB

Cite this report: https://app.malva.re/sha256/f91b79e3699ef2eb397f65717116da36f978126b78786b260466fc9e1390afef

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
5.22 MB · 5,223,936 B
First seen
2026-08-15 20:16 · 2 months ago
Last seen
2026-08-15 20:16 · 2 months ago
Last analysis
2026-08-15 20:38 · 2 months ago
Hashes
MD5 afb477b02aa1cfb5dd7a9267a99f2c31 Sha1 5217d9312259ddd962672062fdf771ab59a557bc Sha256 f91b79e3699ef2eb397f65717116da36f978126b78786b260466fc9e1390afef Sha384 42256152d99f813159f78d9e70597a91fd930806f224868b5894e0a5994caee8e8227d0656c8b4659777d1506cb26b5a Sha512 9769f043401d9cfae37f2b17756feca23b4dca997009969e47c3774531d4f5b1eff1933a8613753b8f55da52d305c595eebdc1a2ee33f3196bb1cd0c04e556cb SSDeep 98304:Cf0F9I3QIw22S6OGJy+6rp0/4tbEwxBF+7VeTW6mHXMVvmidAz5uuNhqtf:pF91ha8Jl6rpxAOHvTW6eXxlhqt TLSH 143633E699C21174C062C3B9895B35ADF13A7BB0C6617D2B39DC1E289E9FE05543E3C2
Detection
PeID
Microsoft Visual C++ v6.0 DLL

1 file
EXEafb477b02aa1cfb5dd7a9267a99f2c31
Structure
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes

An error has occurred. This application may no longer respond until reloaded. Reload 🗙