Suspicious
Suspect

b1b7bc886c6ecb8018aca9257edb9af8

Share on LinkedIn
Print
PE Executable
MD5: b1b7bc886c6ecb8018aca9257edb9af8
Size: 4.61 KB
application/x-dosexec

This sample is a 4.5 KB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
1e25bb36f94f904fd7c4a2d88752fa57c127a533276d0259b6f245386bbe3bd8
MD5
b1b7bc886c6ecb8018aca9257edb9af8
Verdict
Inconclusive
File type
PE Executable · 4.5 KB

Cite this report: https://app.malva.re/sha256/1e25bb36f94f904fd7c4a2d88752fa57c127a533276d0259b6f245386bbe3bd8

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
4.61 KB · 4,608 B
First seen
2026-09-14 04:45 · one month ago
Last seen
2026-09-14 04:45 · one month ago
Last analysis
2026-09-14 04:45 · one month ago
Hashes
MD5 b1b7bc886c6ecb8018aca9257edb9af8 Sha1 ff3ff8ddce01fd1877d4a65dc122dba036c2c59c Sha256 1e25bb36f94f904fd7c4a2d88752fa57c127a533276d0259b6f245386bbe3bd8 Sha384 4f5f6b9ffe3e768179e7223c1ac8a723584a84324df8221f8f01eeec41b768fa19ff790bc9fad3a294204db254d04c25 Sha512 7edd91b54a7f18ee7629fdc5490ad5b18a028a83ebe739ce2dd210329d6b4ed053868b2a5fb5f944a1201169150dfa21c994122432001c49492b1bd936e54e7d SSDeep 48:6I7lwe7oB5M08SvJdSR1Ig9TPe1YpV1ZsSZIXxhxhwcRaK:Pl1uO09xq1Ig9T2Enwp TLSH 4891A5C5F75BE6B6EC1C07F600A379A8C4A82E14927C9B574FE16F0C3C111AA3D2DA52

1 file
EXEb1b7bc886c6ecb8018aca9257edb9af8
Structure
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes

Name Value
Info
PDB Path: t$mn

An error has occurred. This application may no longer respond until reloaded. Reload 🗙