Suspect
PE Executable
MD5: f8800194d88500ea984e05dd8254ac41
Size: 2.97 MB
application/x-dosexec
This sample is a 2.8 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 16a5c2c89d4adca402b6ea15a6412a811140962dfdfbd737eda65019c87fe451
- MD5
- f8800194d88500ea984e05dd8254ac41
- Verdict
- Inconclusive
- File type
- PE Executable · 2.8 MB
Cite this report: https://app.malva.re/sha256/16a5c2c89d4adca402b6ea15a6412a811140962dfdfbd737eda65019c87fe451
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
2.97 MB · 2,974,208 B
First seen
2026-09-04 21:00 · one month ago
Last seen
2026-09-04 21:00 · one month ago
Last analysis
2026-09-04 21:00 · one month ago
Hashes
MD5
f8800194d88500ea984e05dd8254ac41
Sha1
23ec75e97d8c5763e2241c4b8f3d6aacd26540d0
Sha256
16a5c2c89d4adca402b6ea15a6412a811140962dfdfbd737eda65019c87fe451
Sha384
03414f77f559911b82dc0758041a0441fb4da1523ed7a013998875c87e396bee640f42fceed154cfca9d3de83d76756d
Sha512
addb8762fcacaf8e2b49580f5ae2b93486d800e5a584b078b1dfa03fe48c59a859288af463ec143ed266373ac7251f7d8c91a1733b3f16af8d26ddd5386b9384
SSDeep
49152:3cDcM/6wmIP5a5KBc0huKKZR8QV4JABWT1tfX15AobVR9CIaBX3/q07k5g:34cMBmIP5a5KBunR8QyJA8tt5TuIK/qA
TLSH
EDD523DE7DB21974E83BC7B68E92F4BC71283B4487208D9B32CD06D48D12A952C7A775
Detection
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
1 file
EXEf8800194d88500ea984e05dd8254ac41
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes