Suspect
PE Executable
MD5: ff65daa3a1d882216bb86568397a3fc4
Size: 2.98 MB
application/x-dosexec
This sample is a 2.8 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 4ce24ddf15280392b9f2c021d9b5467b3b034f4fcca2267d71dd5225667ac04f
- MD5
- ff65daa3a1d882216bb86568397a3fc4
- Verdict
- Inconclusive
- File type
- PE Executable · 2.8 MB
Cite this report: https://app.malva.re/sha256/4ce24ddf15280392b9f2c021d9b5467b3b034f4fcca2267d71dd5225667ac04f
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
2.98 MB · 2,982,912 B
First seen
2026-08-26 13:45 · 2 months ago
Last seen
2026-08-26 13:45 · 2 months ago
Last analysis
2026-08-26 13:45 · 2 months ago
Hashes
MD5
ff65daa3a1d882216bb86568397a3fc4
Sha1
62c0de2f2338d7b783c7ca0997b6c47123f0b330
Sha256
4ce24ddf15280392b9f2c021d9b5467b3b034f4fcca2267d71dd5225667ac04f
Sha384
48a564bcb0de014823374e5cf7a1ab882f8f0f972271163d1b56eefd2e374c3f42df29f01d8ad9b6b0f038d2e06e222f
Sha512
dddd409069d647aed6355072bdf87d1920c263368587f510f5c0221b2101de3edc34cc4d17fe2bc61bbe5a988d86495eeec930a6c5db00fb7198b433db1c9994
SSDeep
49152:I45bCsZt5MScui0Z4EFAI8l5Q/NpgnUDXn1rhnsbavRo1s3E/M:IOCcTMScuFzFiQ4IrhnsqeyE
TLSH
C7D523D9BCF605B8D833C7AA8E82E47DB22937854B654EAB3BCC76605D025446C3633D
Detection
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
1 file
EXEff65daa3a1d882216bb86568397a3fc4
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes