Suspect
PE Executable
MD5: c67d438cadd5a4361382daa6ef51ac57
Size: 3 MB
application/x-dosexec
This sample is a 2.9 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 5e4aa2174e706863bf2b3117c1333af714da7a754b5b6cd26447cea3417070b7
- MD5
- c67d438cadd5a4361382daa6ef51ac57
- Verdict
- Inconclusive
- File type
- PE Executable · 2.9 MB
Cite this report: https://app.malva.re/sha256/5e4aa2174e706863bf2b3117c1333af714da7a754b5b6cd26447cea3417070b7
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
3 MB · 3,000,320 B
First seen
2026-09-02 23:30 · 2 months ago
Last seen
2026-09-02 23:30 · 2 months ago
Last analysis
2026-09-02 23:30 · 2 months ago
Hashes
MD5
c67d438cadd5a4361382daa6ef51ac57
Sha1
90cd4c1532960a0c593914f3546af251bce5b2d8
Sha256
5e4aa2174e706863bf2b3117c1333af714da7a754b5b6cd26447cea3417070b7
Sha384
9cc8680d29e70d65597a3caaf68ccd97323c499e425303e970194f6587e8f8117fe6e67d47bc0626c40a6873cc2c88e9
Sha512
4136abcf5b8cabd4bc624f48d41c0e003631ef3433245b09bc6e8d72b5d962bdda72e77600934434d7fdb14529c8f73ff049239344e1e82623f5656c158cb21a
SSDeep
49152:wtvxUGj/TH5QskqQVm3hi8eHkV+nDI997WcSpUKQPhWXHHvucqAfek:aTD57DBRDeHkViDIXRSsJWXHP/H
TLSH
72D523AAFD0619B2E836C37B8783A07DB16D37894764CC5F75CC5B40AD929242C3727A
Detection
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
1 file
EXEc67d438cadd5a4361382daa6ef51ac57
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes