Local reference
Suspicious dependency
Inferred
Mal-ecule
O(Al)H(Os)Md(Bi)
Objectives
suspicious severity, 85% confident.
anti-analysis/pe-tampering
PE could not be identified by filefacts
component severity, 86% confident.
anti-static/obfuscation/string
Long mixed-case identifiers cluster
component severity, 85% confident.
evasion/masquerade
PE lacks VS_VERSION_INFO resource
component severity, 95% confident.
evasion/masquerade/file
Filename has EXE extension
component severity, 80% confident.
execution/interpreter/script
SaveToFile string fragment (eToF)
Micro-behaviors
notable severity, 90% confident.
os/sysinfo
Query disk free space
baseline severity, 90% confident.
fs/file
CreateFile API string reference
baseline severity, 90% confident.
process/create
Close handle
component severity, 80% confident.
communications/http/client
Regex component marker
component severity, 85% confident.
process/enumerate
CreateToolhelp32Snapshot API string
Metadata
notable severity, 85% confident.
binary/metrics
PE with malformed section layout
component severity, 100% confident.
binary
File is a compiled binary
component severity, 80% confident.
binary/anomaly
CompanyName field absent from PE version info
component severity, 90% confident.
binary/section
Tiny C string section ratio
Identity
| SHA-256 | 42a8e4821b062a4bb7d91e8146587a1222407775f942167a8cb625f77d888429 |
|---|---|
| Filename | 42a8e4821b062a4bb7d91e8146587a1222407775f942167a8cb625f77d888429.exe |
Origin
| Source | harvest |
|---|
Timeline
| First seen | 14 May 2026 06:52 UTC |
|---|---|
| First analyzed | 31 May 2026 13:06 UTC |
| Last analyzed | 31 May 2026 13:06 UTC |
| Last updated | 31 May 2026 13:06 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | 176d6 |
Not seeing what you expected? Let us know