Suspicious
Suspect

ca6b2325465dbb9af3768223f7f0b0c4

PE Executable
MD5: ca6b2325465dbb9af3768223f7f0b0c4
Size: 4.61 KB
application/x-dosexec

This sample is a 4.5 KB PE Executable. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature among its 403 YARA rules. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.

SHA256
27ae3159b8da864cab010d28145efdea472dde225a3454993b9dc0e85bd5dbb0
MD5
ca6b2325465dbb9af3768223f7f0b0c4
Verdict
No known threat found
File type
PE Executable · 4.5 KB

Cite this report: https://app.malva.re/sha256/27ae3159b8da864cab010d28145efdea472dde225a3454993b9dc0e85bd5dbb0

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
4.61 KB · 4,608 B
First seen
2026-10-02 07:15 · one month ago
Last seen
2026-10-02 07:15 · one month ago
Last analysis
2026-10-02 07:15 · one month ago
Hashes
MD5 ca6b2325465dbb9af3768223f7f0b0c4 Sha1 06a26c78ad45e86d9f56d76bc72f4eb672e6a8d5 Sha256 27ae3159b8da864cab010d28145efdea472dde225a3454993b9dc0e85bd5dbb0 Sha384 287f763ee1e0f0188f89900916d8a2bdee4dda8e68300d2f01fad1461dcd7673dc541f8aa1b52ebcf44753e00d0978d5 Sha512 a11736d2c88ae3aaf04b71fe15402e90a8384b92045a3f1a6fa0a6324925fe89a695e47acde57f2858ffed40b7d58c34aeab2ae98b78a2ef41dc5c913e3eb55b SSDeep 48:6IIF9BlQaexCggZK7An0cF5uduvxRxUjbON9XM/ge93ahr0/:y9BOaMSz0cF50uDxUOvXeg TLSH A191E74170B989E7E85C42BB4C0FB8A0BD1D740A41C483A70338A5993E3A57BF0BCB0E

1 file
EXEca6b2325465dbb9af3768223f7f0b0c4
Structure
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes

Name Value
Info
PDB Path: t$mn

1 file
EXEca6b2325465dbb9af3768223f7f0b0c4
Structure
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙