Suspicious
Suspect

b86d96478f79fecdfb4b7c3d727f2b28

PE Executable
MD5: b86d96478f79fecdfb4b7c3d727f2b28
Size: 3.44 MB
application/x-dosexec

This sample is a 3.3 MB PE Executable. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature among its 403 YARA rules. Static analysis extracted 7 embedded or derived files. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.

SHA256
2a01d5d810752c0cd2339852a8953cefe03a944b6c1f0c74c8908dbffcc77c8a
MD5
b86d96478f79fecdfb4b7c3d727f2b28
Verdict
No known threat found
File type
PE Executable · 3.3 MB

Cite this report: https://app.malva.re/sha256/2a01d5d810752c0cd2339852a8953cefe03a944b6c1f0c74c8908dbffcc77c8a

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
3.44 MB · 3,435,008 B
First seen
2026-08-26 05:30 · 2 months ago
Last seen
2026-08-26 05:30 · 2 months ago
Last analysis
2026-08-26 05:30 · 2 months ago
Hashes
MD5 b86d96478f79fecdfb4b7c3d727f2b28 Sha1 e2f69fd4c44677119818864f17eded8dd6f7961f Sha256 2a01d5d810752c0cd2339852a8953cefe03a944b6c1f0c74c8908dbffcc77c8a Sha384 6649d86145826a792cc72e601b3af7850969c8115a7cdef0fab7f168eeb45358af622ee99ed4dde570e4379605a39e9f Sha512 b9717f5081937a2e8b01901a04699a60cf121c8251ee5defbe8b040e42a84317a7dafbe35398b0f75acb5d258186781b334380f91a0cc9da0dd83bd9bce13f13 SSDeep 49152:0t+u6moswByEom/vv8bNTUPb9GtgTVug+n9ZkD1ZwO:Zmosa9nvyUPbYp1 TLSH E7F55B077C94A1A0C58A8A35D13961737A21BCA8C73477FB2F41B6742F367C219BAF25
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

8 files
EXEb86d96478f79fecdfb4b7c3d727f2b28
Structure
P7B[Authenticode]_6fca2f4b.p7b
BINResources
BINRT_ICON
BINID:0001
BINID:0
BINID:0002
BINID:0
BINID:0003
BINID:0
BINID:0004
IMGID:0
IMGID:0-preview.png
BINRT_GROUP_CURSOR4
BINID:0000
BINID:0
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1

Name Value
Info
Authenticode present at 0x32A400 size 8056 bytes

8 files
EXEb86d96478f79fecdfb4b7c3d727f2b28
Structure
P7B[Authenticode]_6fca2f4b.p7b
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙