Open-source atomic malware analysis

Analyze another

7c7f5cb3a4abac7fd494817a20e4c8d52d6fa4951fa864836e8d3cdcbbff4841.exe

PE
Verdict: BENIGN
SHA256: 7c7f5cb3a4abac7fd494817a20e4c8d52d6fa4951fa864836e8d3cdcbbff4841 · 97%
Mal-ecule
O(Al)H₂(F₂Po)
Size 377.0 KB download
First seen 84 days ago
Analyzed 65 days ago

Objectives

suspicious severity, 85% confident.
anti-analysis/environment-detect Adaptive behavior based on environment
baseline severity, 100% confident.
anti-static/obfuscation/payload Large PE resource section with high entropy

Micro-behaviors

notable severity, 66% confident.
fs/file Delete files (Windows API ANSI)
notable severity, 90% confident.
fs/traversal Switch current working directory
notable severity, 95% confident.
process/terminate Process termination via TerminateProcess
baseline severity, 90% confident.
dylib Windows GetProcAddress API string
baseline severity, 92% confident.
fs/enumerate Directory walker using Win32 find APIs
baseline severity, 90% confident.
fs/file/write Write data to file handle
baseline severity, 90% confident.
mem/alloc Heap memory allocation
baseline severity, 90% confident.
mem/protect Free virtual memory
baseline severity, 90% confident.
os/exception Set last error code
baseline severity, 100% confident.
os/module Reference to USER32.dll
baseline severity, 90% confident.
os/sysinfo/platform Query Windows version info
baseline severity, 90% confident.
process/create Close handle
baseline severity, 95% confident.
process/thread Create thread in current process

Metadata

baseline severity, 100% confident.
binary/metrics Binary has 1000 or more strings
baseline severity, 100% confident.
build Depends on Common-Controls v6
baseline severity, 95% confident.
dylib::comctl32 links comctl32 (InitCommonControlsEx)
baseline severity, 95% confident.
dylib::kernel32 links kernel32 (InterlockedIncrement, InterlockedDecrement, GetStringTypeW, GetStringTypeA, LCMapStringW, ... +67 more)
baseline severity, 95% confident.
dylib::user32 links user32 (LoadStringW, LoadAcceleratorsW, LoadBitmapW, GetMessageW, TranslateMessage, ... +16 more)

20 of 55 traits shown

Identity

SHA-256 7c7f5cb3a4abac7fd494817a20e4c8d52d6fa4951fa864836e8d3cdcbbff4841
Filename 7c7f5cb3a4abac7fd494817a20e4c8d52d6fa4951fa864836e8d3cdcbbff4841.exe

Origin

Source harvest

Timeline

First seen 12 May 2026 19:31 UTC
First analyzed 31 May 2026 03:14 UTC
Last analyzed 31 May 2026 03:14 UTC
Last updated 31 May 2026 03:14 UTC

Labeling

Label bad
Label source harvest
Traits version 52045