Suspect
PE Executable
MD5: fc06b6c7641a42a85265f3e6b8e4b517
Size: 2.96 MB
application/x-dosexec
This sample is a 2.8 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- ea5c078547d7e70e6ea29cc877e9c45a7ab80ff35ae5a7dd7ff49c3ee3541939
- MD5
- fc06b6c7641a42a85265f3e6b8e4b517
- Verdict
- Inconclusive
- File type
- PE Executable · 2.8 MB
Cite this report: https://app.malva.re/sha256/ea5c078547d7e70e6ea29cc877e9c45a7ab80ff35ae5a7dd7ff49c3ee3541939
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
2.96 MB · 2,958,848 B
First seen
2026-08-14 09:31 · 2 months ago
Last seen
2026-08-14 09:31 · 2 months ago
Last analysis
2026-08-14 09:31 · 2 months ago
Hashes
MD5
fc06b6c7641a42a85265f3e6b8e4b517
Sha1
11adf28d4ede2f362438b07ec336b61141baf9d7
Sha256
ea5c078547d7e70e6ea29cc877e9c45a7ab80ff35ae5a7dd7ff49c3ee3541939
Sha384
8e8637ffe55cea5060d0298e4e3263f8ed13d9e6624267958781dd5c85b4e49428ae47d006e4b7dee1744567a5861bf9
Sha512
0f8c81c1d3d9677a7fdfb9e89f5cb7b97c709cd85ae8ec7b6adb509f315a3b25bbe9cc1881f6c92b40e825f7e61a5171038f3e2b830778ae570f32ca75221eb1
SSDeep
49152:utuXnQU7LFM5O/EYfbTSL+MXCcA40bioUAASYXEAMe+hgeZrjHpAm:/XQaM5sLfvMXCIaioASY0u65Hp
TLSH
DCD523D9B9B659B0E433C3B24F83F06DB0297BC18A61DE9B768E6A404C531406C797BD
Detection
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
1 file
EXEfc06b6c7641a42a85265f3e6b8e4b517
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes