Open-source atomic malware analysis

Analyze another

587f80fc13731a74569a7e06f69f3b97a168ccfac77645aefcf49bafb7b5f56a.exe

PE
Verdict: BENIGN
Mal-ecule
H(Os)Md(Bi)
Size 12.5 MB download
First seen 106 days ago
Analyzed 101 days ago

Objectives

component severity, 100% confident.
anti-static/obfuscation/binary-metrics Binary is 1MB or larger
component severity, 99% confident.
anti-static/obfuscation/payload PE version resource text
component severity, 86% confident.
anti-static/obfuscation/string Long mixed-case identifiers cluster
component severity, 85% confident.
evasion/masquerade PE lacks VS_VERSION_INFO resource
component severity, 95% confident.
evasion/masquerade/file Filename has EXE extension

Micro-behaviors

notable severity, 90% confident.
os/sysinfo Query disk free space
baseline severity, 100% confident.
os/module Reference to USER32.dll
component severity, 80% confident.
communications/http/client Regex component marker

Metadata

notable severity, 85% confident.
binary/metrics PE with malformed section layout
baseline severity, 100% confident.
hardening High-entropy ASLR (64-bit)
baseline severity, 88% confident.
lang/compiler Native runtime binary is large
component severity, 100% confident.
binary File is a compiled binary
component severity, 80% confident.
binary/anomaly CompanyName field absent from PE version info
component severity, 90% confident.
binary/section Tiny C string section ratio

Identity

SHA-256 587f80fc13731a74569a7e06f69f3b97a168ccfac77645aefcf49bafb7b5f56a
Filename 587f80fc13731a74569a7e06f69f3b97a168ccfac77645aefcf49bafb7b5f56a.exe

Origin

Source harvest

Timeline

First seen 19 May 2026 06:38 UTC
First analyzed 24 May 2026 00:57 UTC
Last analyzed 24 May 2026 00:57 UTC
Last updated 26 May 2026 01:47 UTC

Labeling

Label bad
Label source harvest
Traits version 9ea7c