Suspect
PE Executable
MD5: e0d9fb0e5a6fb3436edd3d2062fe533e
Size: 5.3 MB
application/x-dosexec
This sample is a 5.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- a3d2ffeb62750d348a1ada2307f98987d3132d6ea9259ed12b1b6dccba9f83ce
- MD5
- e0d9fb0e5a6fb3436edd3d2062fe533e
- Verdict
- Inconclusive
- File type
- PE Executable · 5.1 MB
Cite this report: https://app.malva.re/sha256/a3d2ffeb62750d348a1ada2307f98987d3132d6ea9259ed12b1b6dccba9f83ce
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.3 MB · 5,298,176 B
First seen
2026-09-15 19:30 · one month ago
Last seen
2026-09-15 19:30 · one month ago
Last analysis
2026-09-15 19:30 · one month ago
Hashes
MD5
e0d9fb0e5a6fb3436edd3d2062fe533e
Sha1
5c5b98d8e8e4e7e7a0e62cdead5bcaa791c42d19
Sha256
a3d2ffeb62750d348a1ada2307f98987d3132d6ea9259ed12b1b6dccba9f83ce
Sha384
42af47e2949320933442297864ca79e04cd1fa6211049a5a85589dc8e382e1349ce9b0dd008211aaece07c2553900c32
Sha512
198aa67f6126a44d3a0c36a44cae83322d20951c0a4cf2b27cd0df1b7edf86e27b4d0d5ce6d65193a3457344c7c601434520bf590279aef735304cc829f789a2
SSDeep
12288:jbLgD1bLgmluCtgQbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+D85SQeuW:jbLgBbLgurgDdmMSirYbcMNgef0Xk+8
TLSH
93369E15A2E82B64E7F35FB221778710477A7E45886B925E1660A04F0C33F5CDEB2F29
Detection
PeID
Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) UPolyX 0.3 -> delikon
1 file
EXEe0d9fb0e5a6fb3436edd3d2062fe533e
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential