Open-source atomic malware analysis

Analyze another

afb5cbe324865253c7a9dcadbe66c66746ea360f0cd184a2f4e1bbf104533ccd.exe

PE
Verdict: BENIGN
SHA256: afb5cbe324865253c7a9dcadbe66c66746ea360f0cd184a2f4e1bbf104533ccd · 97%
Mal-ecule
O(Al)H₂(DbPo)
Size 6.8 MB download
First seen 84 days ago
Analyzed 65 days ago

Objectives

notable severity, 96% confident.
anti-analysis/debugger-detect Debugger import symbol

Micro-behaviors

suspicious severity, 90% confident.
data/embedded/payload Multiple malformed embedded PE stubs
notable severity, 95% confident.
process/terminate Process termination via TerminateProcess
baseline severity, 90% confident.
dylib Windows GetProcAddress API string
baseline severity, 90% confident.
fs/enumerate Extended directory enumeration
baseline severity, 90% confident.
fs/file Get file handle type
baseline severity, 90% confident.
fs/file/write Write data to file handle
baseline severity, 95% confident.
hardware/display Unicode console output
baseline severity, 90% confident.
mem/alloc Heap memory allocation
baseline severity, 90% confident.
mem/protect Allocate virtual memory
baseline severity, 90% confident.
mem/sync Initialize thread-safe list header
baseline severity, 90% confident.
os/exception Capture CPU context/registers
baseline severity, 92% confident.
os/module Dynamically resolve own modules and exports
baseline severity, 90% confident.
os/sysinfo Query system hardware info (CPU cores)

Metadata

baseline severity, 100% confident.
binary PE has RT_ICON in resources list
baseline severity, 100% confident.
binary/metrics File larger than 1MB
baseline severity, 90% confident.
binary/section PE .reloc section presence
baseline severity, 95% confident.
dylib::kernel32 links kernel32 (GetCommandLineA, GetTickCount, GetLastError, GetVersion, GetCurrentProcess, ... +83 more)
baseline severity, 100% confident.
hardening ASLR enabled (DYNAMIC_BASE)
baseline severity, 95% confident.
lang/compiler Rust compiler path in binary

20 of 50 traits shown

Identity

SHA-256 afb5cbe324865253c7a9dcadbe66c66746ea360f0cd184a2f4e1bbf104533ccd
Filename afb5cbe324865253c7a9dcadbe66c66746ea360f0cd184a2f4e1bbf104533ccd.exe

Origin

Source harvest

Timeline

First seen 12 May 2026 19:28 UTC
First analyzed 31 May 2026 03:37 UTC
Last analyzed 31 May 2026 03:37 UTC
Last updated 31 May 2026 03:37 UTC

Labeling

Label bad
Label source harvest
Traits version 52045