Suspicious
Suspect

ea66013e9a080df92ae3a0c3945c49b1

PE Executable
MD5: ea66013e9a080df92ae3a0c3945c49b1
Size: 409.6 KB
application/x-dosexec

This sample is a 400 KB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 11 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
c302978da2e06096d88ee757aeb8784015b4e041c500ff6c944516d0d5704f3b
MD5
ea66013e9a080df92ae3a0c3945c49b1
Verdict
Inconclusive
File type
PE Executable · 400 KB

Cite this report: https://app.malva.re/sha256/c302978da2e06096d88ee757aeb8784015b4e041c500ff6c944516d0d5704f3b

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
409.6 KB · 409,599 B
First seen
2026-10-20 14:45 · 12 days ago
Last seen
2026-10-20 14:45 · 12 days ago
Last analysis
2026-10-20 14:45 · 12 days ago
Hashes
MD5 ea66013e9a080df92ae3a0c3945c49b1 Sha1 66cd47fa61b267db3dbdaa3bdfeda8233a87de14 Sha256 c302978da2e06096d88ee757aeb8784015b4e041c500ff6c944516d0d5704f3b Sha384 d23b8613b01aca1ac228bae73cc3fd951188dc62a6a8136cc700d958a3ad64072888af2743fb361a7cfba63f101e316c Sha512 d314f6c14e560df36aaffe7e520edb29d483b67ee2ca14b0cd6c7ad2bc7c46c5e5db8f73fd10f6698339f2c86cc1328a3901d8a16ed59ea72d7de119959067db SSDeep 12288:Zn5wJYfa7K45FIo1H1a1//MyW5r70XkD3:Zn5wISFN1VaV/Mya0Xe TLSH 2A94F19A35722574EE81D5B79481C4F69C2A6F26133E887D2997BE7338F0748385AD30
Detection
PeID
Private EXE Protector 1.8 -> SetiSoftSimplePack V1.1X (Method1) -> bagie

12 files
EXEea66013e9a080df92ae3a0c3945c49b1
Structure
BINResources
BINRT_ICON
BINID:0001
IMGID:1033
IMGID:1033-preview.png
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINID:0006
BINID:1033
BINID:0007
BINID:1033
BINID:0008
BINID:1033
BINID:0009
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0000
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1img 1

12 files
EXEea66013e9a080df92ae3a0c3945c49b1
Structure
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙