Suspect
PE Executable
MD5: ba4b3e20ceddd9460c91925395e0e9c7
Size: 6 MB
application/x-dosexec
This sample is a 5.7 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 13 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 313ca74c5a6fca97af609826c2d81450a7bb779477207115eb4bf6d3f616f469
- MD5
- ba4b3e20ceddd9460c91925395e0e9c7
- Verdict
- Inconclusive
- File type
- PE Executable · 5.7 MB
Cite this report: https://app.malva.re/sha256/313ca74c5a6fca97af609826c2d81450a7bb779477207115eb4bf6d3f616f469
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
6 MB · 5,999,016 B
First seen
2026-09-28 21:00 · 28 days ago
Last seen
2026-09-28 21:00 · 28 days ago
Last analysis
2026-09-28 21:00 · 28 days ago
Hashes
MD5
ba4b3e20ceddd9460c91925395e0e9c7
Sha1
a1cae105299cca2fa8da6696c45e3ea8f0b1aa3c
Sha256
313ca74c5a6fca97af609826c2d81450a7bb779477207115eb4bf6d3f616f469
Sha384
ba72795c89da54b21b05a475117cbcbdd7f51048dd7305f846f394168a925f13989c930945a789443b565e4d1d1591c2
Sha512
6581b150d51bcc842191d6014b8b4eb5a325d70b3f18ec2239b47b0d4e3e2302ab4a84c14b484d329c787f0a205c127bd1cceeacb72bd86a513a23028814ba8a
SSDeep
49152:7qF1SUylyf9F9eGW9pDX2DsAN9i+uOo5AS5lSozu2eyMG501826BtdLmTxMnwC1p:muIf9eX0G50M9BRcMyC8QxJr04h
TLSH
5F567C0378A418A9E099E234C5AA4293FA75BD488B3573E73E1072703F7B7D17A7A744
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
14 files
EXEba4b3e20ceddd9460c91925395e0e9c7
Structure
P7B[Authenticode]_7ffeff06.p7b
BINOverlay_2a3d980a.bin
BINResources
STICH
beta
No STICH Path has been generated for this analysis yet.
3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2img
1| Name | Value |
|---|---|
| Info | Authenticode present at 0x58C200 size 8104 bytes |
| Info | Overlay extracted: Overlay_2a3d980a.bin (8104 bytes) |