Open-source atomic malware analysis

Analyze another

8a290b72c3abedee23df097a5dc65d879f05e2ef1c214c19be8eed0a73528e77.exe

PE
Verdict: BENIGN
SHA256: 8a290b72c3abedee23df097a5dc65d879f05e2ef1c214c19be8eed0a73528e77
Mal-ecule
H(Cm)Md(Bi)
Size 599.0 KB download unavailable
First seen 79 days ago
Analyzed 58 days ago

Well-known

baseline severity, 96% confident.
app Microsoft company metadata
baseline severity, 97% confident.
lib Microsoft ImageHlp company metadata

Objectives

component severity, 100% confident.
anti-static/obfuscation/binary-metrics Binary has normal code entropy (>5.5)
component severity, 99% confident.
anti-static/obfuscation/payload PE version resource text
component severity, 100% confident.
command-and-control/dropper/staging Binary has high overall entropy
component severity, 100% confident.
command-and-control/infrastructure Binary has 4 or fewer sections
component severity, 95% confident.
evasion/indicator-removal Regex component marker
component severity, 95% confident.
evasion/masquerade/file Filename has EXE extension
component severity, 95% confident.
evasion/masquerade/version-resource Microsoft company version identity
component severity, 92% confident.
evasion/process/injection Regex component marker

Micro-behaviors

notable severity, 100% confident.
communications/http/server Access to ASP.NET HttpContext
baseline severity, 90% confident.
dylib Windows GetProcAddress API string

Metadata

notable severity, 96% confident.
binary Multiple PNG images in text
baseline severity, 100% confident.
binary/metrics Binary has 1000 or more strings
baseline severity, 90% confident.
binary/section PE .reloc section presence
baseline severity, 95% confident.
dylib::mscoree links mscoree (CorExeMain)
baseline severity, 100% confident.
hardening DEP / NX enabled (NX_COMPAT)
baseline severity, 90% confident.
lang/compiler mscorlib reference
baseline severity, 84% confident.
package Large binary with few DLL dependencies
component severity, 95% confident.
binary/anomaly PE version info numeric fields present

20 of 36 traits shown

Identity

SHA-256 8a290b72c3abedee23df097a5dc65d879f05e2ef1c214c19be8eed0a73528e77
Filename 8a290b72c3abedee23df097a5dc65d879f05e2ef1c214c19be8eed0a73528e77.exe

Origin

Source harvest

Timeline

First seen 12 May 2026 19:30 UTC
First analyzed 2 Jun 2026 06:25 UTC
Last analyzed 2 Jun 2026 06:25 UTC
Last updated 2 Jun 2026 06:25 UTC

Labeling

Label bad
Label source harvest
Traits version ed903