Suspect
PE Executable
MD5: f5ec29d01c9adb0ecabb2da6bc8fb81a
Size: 5.3 MB
application/x-dosexec
This sample is a 5.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 541677c2ce44edbb6241907c36463e6ded77a9d7cdb48ceb4113f1111ad2f9e8
- MD5
- f5ec29d01c9adb0ecabb2da6bc8fb81a
- Verdict
- Inconclusive
- File type
- PE Executable · 5.1 MB
Cite this report: https://app.malva.re/sha256/541677c2ce44edbb6241907c36463e6ded77a9d7cdb48ceb4113f1111ad2f9e8
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.3 MB · 5,298,176 B
First seen
2026-09-24 14:30 · one month ago
Last seen
2026-09-24 14:30 · one month ago
Last analysis
2026-09-24 14:30 · one month ago
Hashes
MD5
f5ec29d01c9adb0ecabb2da6bc8fb81a
Sha1
aafeaf4892cd200b9dd7b9e03259b49204d2973b
Sha256
541677c2ce44edbb6241907c36463e6ded77a9d7cdb48ceb4113f1111ad2f9e8
Sha384
96de2ef941cbcd26630b7721b7c4431dbbebe734efac6fb40038931a4c33254d0a8c36d50a923ccef013074d16b32a68
Sha512
3452be6e70db7166caeec07ea582c2185b8887566fae80e9040c2b2e684aa1147e82d930be9d8aeb6355f6cb912732d9ed3b27a2eb718286f11956fa1487f303
SSDeep
49152:jnYnjQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0HlAH:DI8qPoBhz1aRxcSUDk36SAEdhvxWa2H
TLSH
DB363308317881FCD1460AB844F78E56F7B37C5A66FA6A0F8B84867B1D53B45AFA4702
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) UPolyX 0.3 -> delikon
1 file
EXEf5ec29d01c9adb0ecabb2da6bc8fb81a
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential