Suspect
PE Executable
MD5: cc4df344dc1c16f87237661240fa385a
Size: 5.3 MB
application/x-dosexec
This sample is a 5.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- a45d9932f01bc4fd5fe80558464fcb6848c025483acf5c1c7519d5471abecce4
- MD5
- cc4df344dc1c16f87237661240fa385a
- Verdict
- Inconclusive
- File type
- PE Executable · 5.1 MB
Cite this report: https://app.malva.re/sha256/a45d9932f01bc4fd5fe80558464fcb6848c025483acf5c1c7519d5471abecce4
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.3 MB · 5,298,176 B
Hashes
MD5
cc4df344dc1c16f87237661240fa385a
Sha1
c7ca4859def3f2554b541cf4202b0d4d33be6b42
Sha256
a45d9932f01bc4fd5fe80558464fcb6848c025483acf5c1c7519d5471abecce4
Sha384
1bec35e8030dc9f695a3e45f4f9a99b0d06c4fe91b91f6b4181b910824ab939aafa69e1bd26eccccb86f145c74d8b277
Sha512
844820b82f4c78342b9360a36ff14f28c24f67b35feb52a669be5fd905170bd7f5fd11df30a9d7aa90f36742d1f232106a9cbe87d3b244ce31d319d33aa00279
SSDeep
24576:jbLgWbLgddQhfdmMSirYbcMNgef0QeQjG:jnXnAQqMSPbcBVQej
TLSH
953612553268C0B8C8165274DC6B8EF5A673BCC6E279424F4B94BF7B3D33350AA28716
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) UPolyX 0.3 -> delikon
1 file
EXEcc4df344dc1c16f87237661240fa385a
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential