Suspect
f5ec29d01c9adb0ecabb2da6bc8fb81a
PE Executable
MD5: f5ec29d01c9adb0ecabb2da6bc8fb81a
Size: 5.3 MB
application/x-dosexec
This sample is a 5.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 541677c2ce44edbb6241907c36463e6ded77a9d7cdb48ceb4113f1111ad2f9e8
- MD5
- f5ec29d01c9adb0ecabb2da6bc8fb81a
- Verdict
- Inconclusive
- File type
- PE Executable · 5.1 MB
Cite this report: https://app.malva.re/sha256/541677c2ce44edbb6241907c36463e6ded77a9d7cdb48ceb4113f1111ad2f9e8
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.3 MB · 5,298,176 B
First seen
2026-09-24 14:30 · one month ago
Last seen
2026-09-24 14:30 · one month ago
Last analysis
2026-09-24 14:30 · one month ago
Hashes
MD5
f5ec29d01c9adb0ecabb2da6bc8fb81a
Sha1
aafeaf4892cd200b9dd7b9e03259b49204d2973b
Sha256
541677c2ce44edbb6241907c36463e6ded77a9d7cdb48ceb4113f1111ad2f9e8
Sha384
96de2ef941cbcd26630b7721b7c4431dbbebe734efac6fb40038931a4c33254d0a8c36d50a923ccef013074d16b32a68
Sha512
3452be6e70db7166caeec07ea582c2185b8887566fae80e9040c2b2e684aa1147e82d930be9d8aeb6355f6cb912732d9ed3b27a2eb718286f11956fa1487f303
SSDeep
49152:jnYnjQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0HlAH:DI8qPoBhz1aRxcSUDk36SAEdhvxWa2H
TLSH
DB363308317881FCD1460AB844F78E56F7B37C5A66FA6A0F8B84867B1D53B45AFA4702
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) UPolyX 0.3 -> delikon
1 file
EXEf5ec29d01c9adb0ecabb2da6bc8fb81a
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential1 file
EXEf5ec29d01c9adb0ecabb2da6bc8fb81a
No malware configuration was found at this point.
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
f5ec29d01c9adb0ecabb2da6bc8fb81a
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account