Suspect
efb7bacb7c95a716a19b6f31fec6dab1
PE Executable
MD5: efb7bacb7c95a716a19b6f31fec6dab1
Size: 26.44 MB
application/x-dosexec
This sample is a 25.2 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 9 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- b6abe110fcd824e122f01d8f70490913f7e8fbfff8405af85f31b8caee9a2408
- MD5
- efb7bacb7c95a716a19b6f31fec6dab1
- Verdict
- Inconclusive
- File type
- PE Executable · 25.2 MB
Cite this report: https://app.malva.re/sha256/b6abe110fcd824e122f01d8f70490913f7e8fbfff8405af85f31b8caee9a2408
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
26.44 MB · 26,437,784 B
First seen
2026-10-20 22:30 · 9 days ago
Last seen
2026-10-20 22:30 · 9 days ago
Last analysis
2026-10-20 22:30 · 9 days ago
Hashes
MD5
efb7bacb7c95a716a19b6f31fec6dab1
Sha1
82d4e992ee71a4f0e51062d0445f6bbc341ecf25
Sha256
b6abe110fcd824e122f01d8f70490913f7e8fbfff8405af85f31b8caee9a2408
Sha384
76664cc00120b23142e519e4f79436853281063ccbef22a4ab532b2ed665b45357e101a7a146e6d07a3109209e97b3f8
Sha512
ce24ce98e88fad34a29f6c099dec4403c72ce981485e40a10adb551f6e520e2d195dc73d146015333a06d95b689cca3f5c00a712fca9e702e2e19a4884aa914a
SSDeep
393216:3p4ugOSMn2HDYEcxICmoYb1uvmQz/1CJiWSmjIy0kcyoNmxk:SuVlgpCmoo14mi/1/xfsxk
TLSH
CA471229638752EFC32A8230596C7761FD6ED964A108DD3ED7A9C17D3CB1C2E24C52E2
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamUPolyX 0.3 -> delikon
10 files
EXEefb7bacb7c95a716a19b6f31fec6dab1
Structure
P7B[Authenticode]_377b406a.p7b
BINResources
BINRT_ICON
BINID:0001
IMGID:1033
IMGID:1033-preview.png
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0001
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
STICH
beta
No STICH Path has been generated for this analysis yet.
3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2img
1| Name | Value |
|---|---|
| Info | Authenticode present at 0x1936238 size 1632 bytes |
10 files
EXEefb7bacb7c95a716a19b6f31fec6dab1
Structure
P7B[Authenticode]_377b406a.p7b
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account