Suspect
PE Executable
MD5: cb60a2ddc6367f8b6fc7db4bc3f0cff9
Size: 7.77 MB
application/x-dosexec
This sample is a 7.4 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 5602547f1c70af08f6652a309ffe8ec554aa59f9368110a8ddfbbc60c8d5cb61
- MD5
- cb60a2ddc6367f8b6fc7db4bc3f0cff9
- Verdict
- Inconclusive
- File type
- PE Executable · 7.4 MB
Cite this report: https://app.malva.re/sha256/5602547f1c70af08f6652a309ffe8ec554aa59f9368110a8ddfbbc60c8d5cb61
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
7.77 MB · 7,770,432 B
First seen
2026-10-11 21:00 · 18 days ago
Last seen
2026-10-11 21:00 · 18 days ago
Last analysis
2026-10-12 15:29 · 17 days ago
Hashes
MD5
cb60a2ddc6367f8b6fc7db4bc3f0cff9
Sha1
4224f23459760b97f5708e096e16b3400a95c1f9
Sha256
5602547f1c70af08f6652a309ffe8ec554aa59f9368110a8ddfbbc60c8d5cb61
Sha384
77b2da1122b0f4fb44d60308ca6ea5196af418eb6236e303b5160ba8792a0ab96461db323e000a883598b1aea358a8d6
Sha512
29176e4fc89a2a518fee7a2d150d7cb076af20af95b30803854e5c2b1cce909a4e3e4daf56dc60df0faa70c53dc96eee75bab4bd5449de9a10bd8d35fd352bc9
SSDeep
98304:RSi1YZ7X4urErvz81LpWjjUa50ZtPvYRt2e4GFNGjfzfbIbApJo4EzKhudJ1XmYC:YkYZcurErvI9pWjgfPvzm6gsFE2EL6z
TLSH
F6763392A3A505B8F4BA423D86B3D016DBB2786613E4C1EF03F052577F036E58E39B56
Detection
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
4 files
EXEcb60a2ddc6367f8b6fc7db4bc3f0cff9
Structure
BINOverlay_3a37e003.bin
BINResources
STICH
beta
No STICH Path has been generated for this analysis yet.
2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_3a37e003.bin (7485248 bytes) |
| Info | PDB Path: t$mn |