Local reference
Suspicious dependency
Inferred
Mal-ecule
H(Os)Md(Bi)
Objectives
component severity, 100% confident.
anti-static/obfuscation/binary-metrics
Binary is 1MB or larger
component severity, 86% confident.
anti-static/obfuscation/string
Long mixed-case identifiers cluster
component severity, 85% confident.
evasion/masquerade
PE lacks VS_VERSION_INFO resource
component severity, 95% confident.
evasion/masquerade/file
Filename has EXE extension
Micro-behaviors
notable severity, 70% confident.
os/privilege
runas privilege elevation string
baseline severity, 100% confident.
data/text
Windows path-like string pattern
baseline severity, 70% confident.
os/module
Get module file path (ANSI)
baseline severity, 90% confident.
process/create
Close handle
component severity, 90% confident.
mem/protect
VirtualAlloc API string reference
component severity, 90% confident.
os/api-resolution
Kernel32 DLL resolution string
Metadata
notable severity, 85% confident.
binary/metrics
PE with malformed section layout
baseline severity, 88% confident.
lang/compiler
Native runtime binary is large
component severity, 100% confident.
binary
File is a compiled binary
component severity, 80% confident.
binary/anomaly
CompanyName field absent from PE version info
component severity, 90% confident.
binary/section
Tiny C string section ratio
Identity
| SHA-256 | e26d72f2cffa2589de9ef1d5db811c5e7b58b33f08745c4dad1693662a4a934d |
|---|---|
| Filename | e26d72f2cffa2589de9ef1d5db811c5e7b58b33f08745c4dad1693662a4a934d.exe |
Origin
| Source | harvest |
|---|
Timeline
| First seen | 19 May 2026 20:34 UTC |
|---|---|
| First analyzed | 24 May 2026 03:29 UTC |
| Last analyzed | 24 May 2026 03:29 UTC |
| Last updated | 26 May 2026 01:47 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | 9ea7c |
Not seeing what you expected? Let us know