Suspect
PE Executable
MD5: ecf2a814b720c1ec88a27bf517808154
Size: 2.97 MB
application/x-dosexec
This sample is a 2.8 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 2282000cd6def22a6473c19b1177c044d01aeea6a820cb4272c0106f1d4e5bbb
- MD5
- ecf2a814b720c1ec88a27bf517808154
- Verdict
- Inconclusive
- File type
- PE Executable · 2.8 MB
Cite this report: https://app.malva.re/sha256/2282000cd6def22a6473c19b1177c044d01aeea6a820cb4272c0106f1d4e5bbb
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
2.97 MB · 2,966,528 B
First seen
2026-09-01 01:45 · one month ago
Last seen
2026-09-01 01:45 · one month ago
Last analysis
2026-09-01 01:45 · one month ago
Hashes
MD5
ecf2a814b720c1ec88a27bf517808154
Sha1
421806bb9022fad301b1a4940c4c79c56d580878
Sha256
2282000cd6def22a6473c19b1177c044d01aeea6a820cb4272c0106f1d4e5bbb
Sha384
bbaf1bdcad41cffe39ff0074963834b7e87891ff69891c949e55bea19748f2fda1f10ec0cb5481a19c5bafdfe90d98bd
Sha512
55c3663a517e230f80beec33316c806229c0279cce9f8dac34c186d396cc9a463211e3c209e9d8e04b8b61e853fda323fb52671ec86a007cd98f1725aa0f5bd6
SSDeep
49152:fcGC+h0AzvotZUIErW0Km0qumVNrF+/VjQcO0MgUTKwtOss2T1WMP:fcz+hX8ZUIEjKvqPF6VjUbrTKwcsseQw
TLSH
77D52299B9F709B8D836C7B58F96F4EDB1287B9203704DCB3A8C39408D126685C36779
Detection
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
1 file
EXEecf2a814b720c1ec88a27bf517808154
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes