Open-source atomic malware analysis

Analyze another

d26eb35cee1df8774294ce519950fd7fe9b1122d23a6afd0626476c7453417fc.exe

PE
Verdict: BENIGN
SHA256: d26eb35cee1df8774294ce519950fd7fe9b1122d23a6afd0626476c7453417fc · 97%
Mal-ecule
H(Os)Md(Bi)
Size 16.7 MB download
First seen 109 days ago
Analyzed 95 days ago

Objectives

component severity, 86% confident.
anti-analysis/debugger-detect GetEnvironmentVariable profiler check
component severity, 99% confident.
anti-static/obfuscation/payload PE version resource text
component severity, 86% confident.
anti-static/obfuscation/string Long mixed-case identifiers cluster
component severity, 85% confident.
evasion/masquerade PE lacks VS_VERSION_INFO resource
component severity, 95% confident.
evasion/masquerade/file Filename has EXE extension
component severity, 86% confident.
evasion/process/injection Source-engine game module target
component severity, 90% confident.
impact/destroy Preserves .exe .gho .bak files

Micro-behaviors

baseline severity, 100% confident.
data/text/malware Malware infrastructure naming suffix
baseline severity, 90% confident.
fs/file CreateFile API string reference
baseline severity, 100% confident.
os/module Reference to USER32.dll
baseline severity, 82% confident.
os/sysinfo GetSystemDirectory API string
baseline severity, 90% confident.
os/sysinfo/platform Query Windows version info
component severity, 80% confident.
communications/http/client Regex component marker
component severity, 92% confident.
data/text/security Security advisory source identifiers

Metadata

notable severity, 85% confident.
binary/metrics PE with malformed section layout
baseline severity, 100% confident.
hardening ASLR enabled (DYNAMIC_BASE)
baseline severity, 88% confident.
lang/compiler Native runtime binary is large
component severity, 100% confident.
binary File is a compiled binary
component severity, 80% confident.
binary/anomaly CompanyName field absent from PE version info
component severity, 90% confident.
binary/section Tiny C string section ratio

20 of 21 traits shown

Identity

SHA-256 d26eb35cee1df8774294ce519950fd7fe9b1122d23a6afd0626476c7453417fc
Filename d26eb35cee1df8774294ce519950fd7fe9b1122d23a6afd0626476c7453417fc.exe

Origin

Source harvest

Timeline

First seen 16 May 2026 08:00 UTC
First analyzed 29 May 2026 21:58 UTC
Last analyzed 29 May 2026 21:58 UTC
Last updated 29 May 2026 21:58 UTC

Labeling

Label bad
Label source harvest
Traits version ca5ef