Suspect
PE Executable
MD5: e055e41b4fcfae545c51506fa16d4085
Size: 3.04 MB
application/x-dosexec
This sample is a 2.9 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 0ec3487f79cb0fc47ea70ce3f93b13bb3013e54cd65c2e9b3c83c4663652321f
- MD5
- e055e41b4fcfae545c51506fa16d4085
- Verdict
- Inconclusive
- File type
- PE Executable · 2.9 MB
Cite this report: https://app.malva.re/sha256/0ec3487f79cb0fc47ea70ce3f93b13bb3013e54cd65c2e9b3c83c4663652321f
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
3.04 MB · 3,041,280 B
First seen
2026-09-01 05:00 · one month ago
Last seen
2026-09-01 05:00 · one month ago
Last analysis
2026-09-01 05:00 · one month ago
Hashes
MD5
e055e41b4fcfae545c51506fa16d4085
Sha1
ee1089ea700471032c96531f52316c359ee2e696
Sha256
0ec3487f79cb0fc47ea70ce3f93b13bb3013e54cd65c2e9b3c83c4663652321f
Sha384
758d6f3ee58a957db85b2b57e74ff96ef770ca56946b8597fbce7e9e39437f17590d323b664d08b28043b0120f7b0b30
Sha512
cee0b698a9bf1acec01a425271237afc6bef95620ffac9794043d70a2feaab6fc10b616da80d93122aa9dac888bbfc6e4e7204b93efbc9cae8777fd391f03c31
SSDeep
49152:/3VoV1Q8nE6+a9iD4KYDVyJv+CZXG+Eoi+IQywxoE9nLOf6OuEm3wHFiyr/Vkfvr:yV1QMETfcDsdZcrwGwn0Vrqwljrm5s
TLSH
94E52354BDC67BB2E07AC3BB42E3A0BE3129378589A44C9D37896B113E639183D77345
Detection
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
1 file
EXEe055e41b4fcfae545c51506fa16d4085
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes