Suspect
PE Executable
MD5: e6bc1fe3a46ec4fa2d2a6c977c7315a1
Size: 13.71 MB
application/x-dosexec
This sample is a 13.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 192 embedded or derived files. It matches 2 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 6e86f152dfb775e8c33c7692a2e314d7e614f7ee366fafb8bd6719522a27be83
- MD5
- e6bc1fe3a46ec4fa2d2a6c977c7315a1
- Verdict
- Inconclusive
- File type
- PE Executable · 13.1 MB
Cite this report: https://app.malva.re/sha256/6e86f152dfb775e8c33c7692a2e314d7e614f7ee366fafb8bd6719522a27be83
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
13.71 MB · 13,705,216 B
First seen
2026-10-14 16:16 · 17 days ago
Last seen
2026-10-14 16:16 · 17 days ago
Last analysis
2026-10-14 16:29 · 17 days ago
Hashes
MD5
e6bc1fe3a46ec4fa2d2a6c977c7315a1
Sha1
10604f1cc38a8f835c7692f3425c87790f2493a2
Sha256
6e86f152dfb775e8c33c7692a2e314d7e614f7ee366fafb8bd6719522a27be83
Sha384
faaefca0643f0643a5a1fa9e703143922db6c459b8ee731f344ff1b169d161a53421361ec079e824979d54dfc3adc3c8
Sha512
2cd07dbe6c488da9b03394ed998e213697caa41530bc5a9e55421e69c0285eb30391a530a97994ea36ec2eddbf3436b7e4cc9a11243972fecb745f28b81c5e76
SSDeep
98304:F5VaaqGR3vePrXSyM9rDVtLkVIUUuLXt53zP2t5elO78E:76PrXSyM1DVtLkVIUUuLXt53zPOeZ
TLSH
9ED6499252DCBD85D23A8278F37713E1E6ACEC528311D2CF06D0BD163A7A6837936395
Detection
PeID
HQR data fileMicrosoft Visual C++ DLLMicrosoft Visual C++ v6.0Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12Private EXE Protector V2.30-V2.3X -> SetiSoft Team
Symbol obfuscation
Low
193 files
EXEe6bc1fe3a46ec4fa2d2a6c977c7315a1
Structure
BINResources
BIN.Net Resources
STICH
beta
No STICH Path has been generated for this analysis yet.
2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2| Name | Value |
|---|---|
| Module Name | System.Windows.Forms.dll |
| Full Name | System.Windows.Forms.dll |
| Scope Name | System.Windows.Forms.dll |
| Scope Type | ModuleDef |
| Kind | Dll |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | System.Windows.Forms |
| Assembly Version | 10.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | True |
| PublicKey Token | b77a5c561934e089 |
| Target Framework | .NETCoreApp,Version=v10.0 |
| Info | PDB Path: System.Windows.Forms.ni.pdb |
| Total Strings | 5949 |
| Main Method | Not found or no body |