Suspicious
Suspect

e05f22518521d3e1060348781355ff51

PE Executable
MD5: e05f22518521d3e1060348781355ff51
Size: 1.11 MB
application/x-dosexec

This sample is a 1.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 11 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
078fa7bbadf57f49e51288f168f729b3201d9da0a345e7235072c3af374f552e
MD5
e05f22518521d3e1060348781355ff51
Verdict
Inconclusive
File type
PE Executable · 1.1 MB

Cite this report: https://app.malva.re/sha256/078fa7bbadf57f49e51288f168f729b3201d9da0a345e7235072c3af374f552e

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
1.11 MB · 1,113,088 B
First seen
2026-10-19 08:15 · 14 days ago
Last seen
2026-10-19 08:15 · 14 days ago
Last analysis
2026-10-19 16:17 · 14 days ago
Hashes
MD5 e05f22518521d3e1060348781355ff51 Sha1 b51a282ef0b6050b1b63bdd5b30878eede829ce9 Sha256 078fa7bbadf57f49e51288f168f729b3201d9da0a345e7235072c3af374f552e Sha384 9bfad644b1dc09a6d855f46e7d729ae4b7f3e4057d90b166901b932ae0282502aa105da2d0ab2f4d79e973228bc045bc Sha512 ab5d14c8dda061c9b7712a9009adec085b330e925381561e365b4a3877dbd0a1d5b4b31a8c8c03119478a61fe91cf9df8d2a317b5c6e855cf35ef5a47b617414 SSDeep 24576:zqj0qdPhoPa+Gn2WwnZJLvkNPhDpwlG1ODmm/rdVrpc:OPkGnWZJLslYiODt/TK TLSH DB3512586626D602C8A197B80A71F2B8277A1FDEBA40D3135EDEBEEF7574F050D04293
Detection
Symbol obfuscation
Medium

12 files
EXEe05f22518521d3e1060348781355ff51
Structure
BIN.Net Resources
BINRooftopSolar.Properties.Resources.resources
BINNJ
DATA[NBF]root.Data
BINh21
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINiFhB
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BINRT_MANIFEST
BINID:0001
BINID:0
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1

Name Value
Module Name
DePT.exe
Full Name
DePT.exe
EntryPoint
System.Void RooftopSolar.Program::Main()
Scope Name
DePT.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
DePT
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
201
Main Method
System.Void RooftopSolar.Program::Main()
Main IL Instruction Count
10
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void RooftopSolar.Paalomake::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>

12 files
EXEe05f22518521d3e1060348781355ff51
Structure
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙