Suspicious
Suspect

dabb41ba4b6d0035906d622ea9233a7f

PE Executable
MD5: dabb41ba4b6d0035906d622ea9233a7f
Size: 27.38 MB
application/x-dosexec

This sample is a 26.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 40 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
58f4e457c868283dee211b3dc30ffc02fdf203caa8c73e9f9ff711d69313608d
MD5
dabb41ba4b6d0035906d622ea9233a7f
Verdict
Inconclusive
File type
PE Executable · 26.1 MB

Cite this report: https://app.malva.re/sha256/58f4e457c868283dee211b3dc30ffc02fdf203caa8c73e9f9ff711d69313608d

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
27.38 MB · 27,380,408 B
First seen
2026-10-21 14:01 · 5 days ago
Last seen
2026-10-21 14:01 · 5 days ago
Last analysis
2026-10-21 14:02 · 5 days ago
Hashes
MD5 dabb41ba4b6d0035906d622ea9233a7f Sha1 aeb6d83353d3a532f350454d149ed9c6a3615171 Sha256 58f4e457c868283dee211b3dc30ffc02fdf203caa8c73e9f9ff711d69313608d Sha384 851d4ababa7aa37cdc3c78ff5b367f98ef46cca05cc50e8be5c8b39361eac476a6a7d4a1c4e169d02d1b7ef0bc29f915 Sha512 9421ab3ac107ba45f591f3e56c32b93074e11d25a1097c3b7faba44d23247bdef74b6ed34068bfe59970d650d6b4791b6f3f9d3876c5aca11d3e24f01f9b709a SSDeep 393216:rrOkLI1mb2uPcH48IBR/FcItHOn42YKutIs:nTemau0HEBNFYn42YKutp TLSH 8E57A051F30B05F6FF434C3645F96B2F7F39E2DC8974C55AE828242ABAA2C1B459C291
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12PeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamUPolyX 0.3 -> delikon

20 files
EXEdabb41ba4b6d0035906d622ea9233a7f
Structure
P7B[Authenticode]_afee49f7.p7b
BINResources
BINRT_ICON
BINID:0000
BINID:1033
Structure
BINOverlay_314e60d3.bin
BIN(folder)
BIN4
BIN19
BIN31
BIN45
BIN57
BIN70
BIN81
BINResources
BINRT_ICON
BINID:0001
IMGID:1033
IMGID:1033-preview.png
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0001
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
BINID:0001
IMGID:1033
IMGID:1033-preview.png
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0001
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

6 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 4img 2

Name Value
Info
Authenticode present at 0x1A1C400 size 1720 bytes

20 files
EXEdabb41ba4b6d0035906d622ea9233a7f
Structure
P7B[Authenticode]_afee49f7.p7b
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙