Suspect
ddb014d369c4f430e83c61f4aafb5b39
PE Executable
MD5: ddb014d369c4f430e83c61f4aafb5b39
Size: 606.72 KB
application/x-dosexec
This sample is a 592.5 KB PE Executable. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature among its 403 YARA rules. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.
- SHA256
- 96609ecd70f658383a6107c4aa827c78627ed05bf9cf26605cdb3fdfdb6dd313
- MD5
- ddb014d369c4f430e83c61f4aafb5b39
- Verdict
- No known threat found
- File type
- PE Executable · 592.5 KB
Cite this report: https://app.malva.re/sha256/96609ecd70f658383a6107c4aa827c78627ed05bf9cf26605cdb3fdfdb6dd313
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
606.72 KB · 606,720 B
First seen
2026-10-23 05:30 · 11 days ago
Last seen
2026-10-23 05:30 · 11 days ago
Last analysis
2026-10-23 05:30 · 11 days ago
Hashes
MD5
ddb014d369c4f430e83c61f4aafb5b39
Sha1
a13c9f26c6bd59c48d45cd521d18fc7414af65a1
Sha256
96609ecd70f658383a6107c4aa827c78627ed05bf9cf26605cdb3fdfdb6dd313
Sha384
4a780bbecead164a247fde9f8b07b07e75ce7d3d06f554a5603763912ba1b4d6f3543f85f342dccebaef0558b2bee36c
Sha512
8a420c0702294a609d1679805331f84ed44c7fad0eef639373e92d01e8d4e25af84e5f760262ddf4320844cc3898c0300bfd498ad7daee5e2a66ab6c3dccdf59
SSDeep
12288:hY7YEM2qmkbuStdYXsHSFsIG/ChLY+dranz2eLBgZa:K7pM2qNbuWqcHSFy6lY+axKa
TLSH
79D46C13F39286ECD42AC974836A9133F6753C884630B6BF57A45A252F36BA0E73D705
Detection
PeID
Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12
1 file
EXEddb014d369c4f430e83c61f4aafb5b39
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential1 file
EXEddb014d369c4f430e83c61f4aafb5b39
No malware configuration was found at this point.
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
ddb014d369c4f430e83c61f4aafb5b39
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account