Open-source atomic malware analysis

Analyze another

9665ccc9c343bbb48847b09f7b771995083eba55823ad0284caa68a6a032368b.exe

PE
Verdict: BENIGN
SHA256: 9665ccc9c343bbb48847b09f7b771995083eba55823ad0284caa68a6a032368b
Mal-ecule
O(As)H(Ds)
Size 1.7 MB download
First seen 80 days ago
Analyzed 78 days ago
Source exe

Objectives

suspicious severity, 90% confident.
anti-static/obfuscation/eval Packed binary process execution

Micro-behaviors

notable severity, 88% confident.
dylib/load Dynamic library loading via LoadLibraryW
baseline severity, 90% confident.
communications/ipc Create anonymous pipe
baseline severity, 100% confident.
crypto/symmetric Go 1.22+ internal chacha8rand
baseline severity, 90% confident.
dylib Windows GetProcAddress API string
baseline severity, 90% confident.
dylib/library Async I/O library (libevent, libev, etc.)
baseline severity, 90% confident.
fs/file Get standard I/O handle
baseline severity, 90% confident.
fs/file/write Write data to file handle
baseline severity, 95% confident.
hardware/display Unicode console output
baseline severity, 90% confident.
mem/protect Free virtual memory
baseline severity, 90% confident.
os/exception Virtual unwind stack frame
baseline severity, 90% confident.
os/module Resolve exports with GetProcAddress
baseline severity, 90% confident.
os/random Generate cryptographic random bytes
baseline severity, 90% confident.
os/sysinfo Query system hardware info (CPU cores)
baseline severity, 95% confident.
process/inject/runtime SetThreadContext API reference
baseline severity, 95% confident.
process/thread Create thread in current process

Metadata

baseline severity, 100% confident.
binary/metrics Binary has 1000 or more strings
baseline severity, 90% confident.
binary/section PE .reloc section presence
baseline severity, 95% confident.
dylib::kernel32 links kernel32 (WriteFile, WriteConsoleW, WerSetFlags, WerGetFlags, WaitForMultipleObjects, ... +41 more)
baseline severity, 100% confident.
hardening High-entropy ASLR (64-bit)

20 of 74 traits shown

Identity

SHA-256 9665ccc9c343bbb48847b09f7b771995083eba55823ad0284caa68a6a032368b
Filename 9665ccc9c343bbb48847b09f7b771995083eba55823ad0284caa68a6a032368b.exe

Origin

Source harvest
Domain exe

Timeline

First seen 22 May 2026 09:12 UTC
First analyzed 24 May 2026 11:07 UTC
Last analyzed 24 May 2026 11:07 UTC
Last updated 25 May 2026 23:13 UTC

Labeling

Label bad
Label source harvest
Traits version 9ea7c