Suspicious
Suspect

d48069d3bf658112c83f9b11d8231a9a

Share on LinkedIn
Print
PE Executable
MD5: d48069d3bf658112c83f9b11d8231a9a
Size: 2.16 MB
application/x-dosexec

This sample is a 2.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 7 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
ba80f101c6a045a2eb0aa281e5166895306baa249f1d4494fe4e70171fab3684
MD5
d48069d3bf658112c83f9b11d8231a9a
Verdict
Inconclusive
File type
PE Executable · 2.1 MB

Cite this report: https://app.malva.re/sha256/ba80f101c6a045a2eb0aa281e5166895306baa249f1d4494fe4e70171fab3684

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
2.16 MB · 2,161,664 B
First seen
2026-10-29 07:00 · 3 days ago
Last seen
2026-10-29 07:00 · 3 days ago
Last analysis
2026-10-29 08:00 · 3 days ago
Hashes
MD5 d48069d3bf658112c83f9b11d8231a9a Sha1 c3fc9cbd35760a44231b0da3383e038fd0daf3b7 Sha256 ba80f101c6a045a2eb0aa281e5166895306baa249f1d4494fe4e70171fab3684 Sha384 01282dbb427167fe4f22279049872a505982f7a52f6212a2018fd80bd56bea101adcc0c976b1676066ec4c6e85d1406b Sha512 5cd126d5b11981cd1bb8d7c18683ec939f2d81515a0af7968d1b2d453ca57a43f936fb86110462c91247c42b9dd4c697b5052cd925870249ddd588f7e1008f1d SSDeep 24576:gBOjP69U5FS7oSSGb3xaEgLYGUOysds2BRZ4w+DYjX+Hyg5IDeWAlUHTUq:yOjbPSUGb3xaEgLH7H4H9Hyg5IiT+ TLSH B7A59E17A3A400FDD1A7C1B8C9175907EB71B80A0731AADF13D09A662F27AE15F7B724
Detection
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12UPolyX 0.3 -> delikon

8 files
EXEd48069d3bf658112c83f9b11d8231a9a
Structure
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe>pe:rsrc>pe:dll
Shape pe:exe>pe:rsrc>pe:dll
3 nodes

Name Value
Info
PDB Path: t$di

An error has occurred. This application may no longer respond until reloaded. Reload 🗙