Suspect
b4b937156fcd16e1e383cb038a85583b
Disk Image
MD5: b4b937156fcd16e1e383cb038a85583b
Size: 2.95 MB
This sample is a 2.8 MB Disk Image for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 38 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- c296c308384f8f78c2e023402a75a1068b85e4a79d8160e3010f5cdd2c9f3391
- MD5
- b4b937156fcd16e1e383cb038a85583b
- Verdict
- Inconclusive
- File type
- Disk Image · 2.8 MB
Cite this report: https://app.malva.re/sha256/c296c308384f8f78c2e023402a75a1068b85e4a79d8160e3010f5cdd2c9f3391
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Disk image
Size
2.95 MB · 2,947,072 B
First seen
2026-10-28 10:30 · 6 hours ago
Last seen
2026-10-28 10:30 · 6 hours ago
Last analysis
2026-10-28 10:30 · 6 hours ago
Hashes
MD5
b4b937156fcd16e1e383cb038a85583b
Sha1
4e37fc1c47803208102f47a4058b42f4e3054f9a
Sha256
c296c308384f8f78c2e023402a75a1068b85e4a79d8160e3010f5cdd2c9f3391
Sha384
9577e698e3d913801d539e460fa91f0c0830774b385ce424d148592bc83811811410e8b6b1b9a48b593a3521e6442687
Sha512
808af9930290a8684ac3e5a555c91be16a1751515b2d599324c824acc843d056c1b0bbb8f41ccafc08e6af045930509f8370153ad6daf386f87462a3335f9b2c
SSDeep
49152:wcQ/PSIDDOc96E5QIus+TX8fV1L+OOWgtWp1qVXiA:wb/PUz
TLSH
B3D57B13B2452AE2D29EB178485E5B2AF3B17816CB30E2C71296594D1F2BBE5DF7F100
39 files
ISOb4b937156fcd16e1e383cb038a85583b
EXEPenaltyOrder.exe
Structure
P7B[Authenticode]_adb7a499.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:2052
BINRT_MANIFEST
BINID:0001
BINID:1033
DLLmagic_xe_core.dll
Structure
P7B[Authenticode]_b6c16824.p7b
BINResources
BINRC
BINID:020B
BINID:0
BINID:020C
BINID:0
BINID:020D
BINID:0
BINID:020E
BINID:0
BINID:020F
BINID:0
DLLmsvcp140.dll
Structure
P7B[Authenticode]_b8ce8097.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLmsvcp140_1.dll
Structure
P7B[Authenticode]_044dd016.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLmsvcp140_2.dll
Structure
P7B[Authenticode]_539e25b3.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLmsvcp140_atomic_wait.dll
Structure
P7B[Authenticode]_7806315f.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLmsvcp140_codecvt_ids.dll
Structure
P7B[Authenticode]_0e6c8714.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLvccorlib140.dll
Structure
P7B[Authenticode]_c0218757.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLvcruntime140.dll
Structure
P7B[Authenticode]_5523a569.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLvcruntime140_1.dll
Structure
P7B[Authenticode]_fb173828.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLvcruntime140_threads.dll
Structure
P7B[Authenticode]_821e4d38.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
STICH
beta
No STICH Path has been generated for this analysis yet.
4 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
439 files
ISOb4b937156fcd16e1e383cb038a85583b
EXEPenaltyOrder.exe
DLLmagic_xe_core.dll
DLLmsvcp140.dll
DLLmsvcp140_1.dll
DLLmsvcp140_2.dll
DLLmsvcp140_atomic_wait.dll
DLLmsvcp140_codecvt_ids.dll
DLLvccorlib140.dll
DLLvcruntime140.dll
DLLvcruntime140_1.dll
DLLvcruntime140_threads.dll
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account