Suspect
PE Executable
MD5: ddb014d369c4f430e83c61f4aafb5b39
Size: 606.72 KB
application/x-dosexec
This sample is a 592.5 KB PE Executable. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature among its 403 YARA rules. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.
- SHA256
- 96609ecd70f658383a6107c4aa827c78627ed05bf9cf26605cdb3fdfdb6dd313
- MD5
- ddb014d369c4f430e83c61f4aafb5b39
- Verdict
- No known threat found
- File type
- PE Executable · 592.5 KB
Cite this report: https://app.malva.re/sha256/96609ecd70f658383a6107c4aa827c78627ed05bf9cf26605cdb3fdfdb6dd313
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
606.72 KB · 606,720 B
First seen
2026-10-23 05:30 · 11 days ago
Last seen
2026-10-23 05:30 · 11 days ago
Last analysis
2026-10-23 05:30 · 11 days ago
Hashes
MD5
ddb014d369c4f430e83c61f4aafb5b39
Sha1
a13c9f26c6bd59c48d45cd521d18fc7414af65a1
Sha256
96609ecd70f658383a6107c4aa827c78627ed05bf9cf26605cdb3fdfdb6dd313
Sha384
4a780bbecead164a247fde9f8b07b07e75ce7d3d06f554a5603763912ba1b4d6f3543f85f342dccebaef0558b2bee36c
Sha512
8a420c0702294a609d1679805331f84ed44c7fad0eef639373e92d01e8d4e25af84e5f760262ddf4320844cc3898c0300bfd498ad7daee5e2a66ab6c3dccdf59
SSDeep
12288:hY7YEM2qmkbuStdYXsHSFsIG/ChLY+dranz2eLBgZa:K7pM2qNbuWqcHSFy6lY+axKa
TLSH
79D46C13F39286ECD42AC974836A9133F6753C884630B6BF57A45A252F36BA0E73D705
Detection
PeID
Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12
1 file
EXEddb014d369c4f430e83c61f4aafb5b39
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential