Suspect
PE Executable
MD5: 2bbcf73469d7c81350cc711af3c0127a
Size: 922.9 KB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 2bbcf73469d7c81350cc711af3c0127a |
| Sha1 | f0f1986022ce311c19a962a8551d73eaa91fe8e7 |
| Sha256 | 7a99db2f37c45efe719b0de34a7eb54b63e33c0bf66059020af424799e70f756 |
| Sha384 | 675895a654b414b95f895547ecc80de66ed9c67fa6be737925067f95940284f1a6a8dbb667be63d21317d77b08d65cde |
| Sha512 | 626a98cb2660cd6471c0d0682c06cca9bfd475fab4e9def5f5a7861a7cf940b47f3e814d3b6dc584b1b989be1b504d79c47022c7bedf9a8d8d2e785bda8828e4 |
| SSDeep | 24576:FmF8SjvPme7TKCC/7i1itq+q0SG02u9I1Dt:FmF0cpahtzSEuKH |
| TLSH | E1158C22A1A1C437D17237FE8D7B42B598AAFD013D29A54A2EE45D4C0F3B29178353B7 |
PeID
BobSoft Mini Delphi -> BoB / BobSoftBorland Delphi 2006Borland Delphi 2006 - 2007Borland Delphi 4.0Borland Delphi v3.0Borland Delphi v3.0 - v7.0Borland Delphi v6.0 - v7.0Borland Delphi v6.0 - v7.0Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12
STICH
beta
No STICH Path has been generated for this analysis yet.
2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Authenticode present at 0xDE000 size 13584 bytes |