Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec

The file b8b7a103484504636148673a44eca835 is a PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 7 embedded or derived files. It matches 6 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
—
MD5
-
Verdict
Inconclusive
File type
PE Executable

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Detection
PeID
MASM/TASM - sig4 (h)Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12UPolyX 0.3 -> delikon

7 files
EXEb8b7a103484504636148673a44eca835
Structure
BINOverlay_2b268e20.bin

Name Value
Info
Overlay extracted: Overlay_2b268e20.bin (2689321 bytes)
Info
PDB Path: D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\Corehost.Static\singlefilehost.pdb
An error has occurred. This application may no longer respond until reloaded. Reload 🗙