Suspicious
Suspect

b0484976b848c4d4cfd67f97f62ac8f2

Share on LinkedIn
Print
PE Executable
MD5: b0484976b848c4d4cfd67f97f62ac8f2
Size: 941.57 KB
application/x-dosexec

This sample is a 919.5 KB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 12 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
cc9b6a5d4967278cca9da79ac7a99501d847d1da60d055409abffeadfb4ef761
MD5
b0484976b848c4d4cfd67f97f62ac8f2
Verdict
Inconclusive
File type
PE Executable · 919.5 KB

Cite this report: https://app.malva.re/sha256/cc9b6a5d4967278cca9da79ac7a99501d847d1da60d055409abffeadfb4ef761

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
941.57 KB · 941,568 B
First seen
2026-08-27 11:30 · 2 months ago
Last seen
2026-08-27 11:30 · 2 months ago
Last analysis
2026-08-27 14:49 · 2 months ago
Hashes
MD5 b0484976b848c4d4cfd67f97f62ac8f2 Sha1 fbf1d402794835b91717fb5b725a990752b26838 Sha256 cc9b6a5d4967278cca9da79ac7a99501d847d1da60d055409abffeadfb4ef761 Sha384 f5257cc58e14626bdfd7a23aa5671089da95a26d3994393281998f72c4f254b22f9a4f429fe70aed17fdb765837f7e55 Sha512 e3c749acf9139c4955ffc63e6421089a9a96b2086657080cac582ec6a24363c3909befe1ea2312a1d1da39b7739e58bdcb6ff1b3587f1db92aa2d913c2c3737e SSDeep 24576:/o+5Dtkm/HBK9ERmGW0pYoJBT7G5gWZiIoBVU46M3M21HF:/h5S9Pwj7G5jiIoDoEMwF TLSH C9151269A764FC12D66E27B64972F37A23685F0EE825D31BCBEC9EE378017117C44181
Detection
Symbol obfuscation
Low

13 files
EXEb0484976b848c4d4cfd67f97f62ac8f2
Structure
STICH beta

No STICH Path has been generated for this analysis yet.

4 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 2

Name Value
Info
PDB Path: C:\Users\Administrator\Desktop\Client\Temp\gTiZdUAVSQ\src\obj\Debug\OvYX.pdb
Module Name
OvYX.exe
Full Name
OvYX.exe
EntryPoint
System.Void VirtualMachine26.Program::Main()
Scope Name
OvYX.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
OvYX
Assembly Version
0.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.7.2
Total Strings
171
Main Method
System.Void VirtualMachine26.Program::Main()
Main IL Instruction Count
10
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void VirtualMachine26.DebuggerUI::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>

An error has occurred. This application may no longer respond until reloaded. Reload 🗙