Suspect
2c451e5a3635ecd40ebd4a824267ea69
PE Executable
MD5: 2c451e5a3635ecd40ebd4a824267ea69
Size: 663.82 KB
application/x-dosexec
This sample is a 648.3 KB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 54 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 89a75b18c6f3e11f0dc06baf7224140da0e2238d3c1b4064ff0d514dcf41ef4e
- MD5
- 2c451e5a3635ecd40ebd4a824267ea69
- Verdict
- Inconclusive
- File type
- PE Executable · 648.3 KB
Cite this report: https://app.malva.re/sha256/89a75b18c6f3e11f0dc06baf7224140da0e2238d3c1b4064ff0d514dcf41ef4e
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
663.82 KB · 663,824 B
First seen
2026-10-12 14:00 · 15 days ago
Last seen
2026-10-12 14:00 · 15 days ago
Last analysis
2026-10-12 14:00 · 15 days ago
Hashes
MD5
2c451e5a3635ecd40ebd4a824267ea69
Sha1
5162a35b0edef406678c7535dd1b4bc060c82dcd
Sha256
89a75b18c6f3e11f0dc06baf7224140da0e2238d3c1b4064ff0d514dcf41ef4e
Sha384
3ac7d627c8019d071db10313b4c6ba9155e1b82731fd363467bd948cb34ca38caa20e162a923dcd0c72a54d1942b1f4d
Sha512
1fe23ab77bd0db8418010147ec0a6148ebfb30a3b4e9936dacff6fa95bb4742a67eecc5125fae7533c59a08c01f9ec3cdb724998b7313cd47f4728447b2ddf0e
SSDeep
12288:S+DkHFnLCA5mXX0tEo8mB1tqGQ6vVeX1cx952SgdMQ0Nxb530P4:JgZnU0tmEnvVeSBB+M1l
TLSH
D6E48E26B2E0E532D1631E388D5BE2799C3A7E413928986E2EE85D4C7F3464134673F7
Detection
PeID
BobSoft Mini Delphi -> BoB / BobSoftBorland DelphiBorland Delphi 4.0Borland Delphi v3.0 - v7.0Borland Delphi v6.0 - v7.0Borland Delphi v6.0 - v7.0Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12
45 files
EXE2c451e5a3635ecd40ebd4a824267ea69
Structure
P7B[Authenticode]_15d517b1.p7b
BINResources
BINRTIRTWERQQ
BINID:0000
BINID:1033
BINRT_CURSOR
BINID:0001
BINID:0
BINID:0002
BINID:0
BINID:0003
BINID:0
BINID:0004
BINID:0
BINID:0005
BINID:0
BINID:0006
BINID:0
BINID:0007
BINID:0
BINRT_BITMAP
BINID:0000
BINID:0
BINRT_ICON
BINID:0001
BINID:1033
BINRT_DIALOG
BINID:0000
BINID:0
BINRT_STRING
BINID:0FEB
BINID:0
BINID:0FEC
BINID:0
BINID:0FED
BINID:0
BINID:0FEE
BINID:0
BINID:0FEF
BINID:0
BINID:0FF0
BINID:0
BINID:0FF1
BINID:0
BINID:0FF2
BINID:0
BINID:0FF3
BINID:0
BINID:0FF4
BINID:0
BINID:0FF5
BINID:0
BINID:0FF6
BINID:0
BINID:0FF7
BINID:0
BINID:0FF8
BINID:0
BINID:0FF9
BINID:0
BINID:0FFA
BINID:0
BINID:0FFB
BINID:0
BINID:0FFC
BINID:0
BINID:0FFD
BINID:0
BINID:0FFE
BINID:0
BINID:0FFF
BINID:0
BINID:1000
BINID:0
BINRT_RCDATA
BINID:0000
BINID:0
BINRT_GROUP_CURSOR2
BINID:7FF9
BINID:0
BINID:7FFA
BINID:0
BINID:7FFB
BINID:0
BINID:7FFC
BINID:0
BINID:7FFD
BINID:0
BINID:7FFE
BINID:0
BINID:7FFF
BINID:0
BINRT_GROUP_CURSOR4
BINID:0000
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
STICH
beta
No STICH Path has been generated for this analysis yet.
2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2| Name | Value |
|---|---|
| Info | Authenticode present at 0x9EC00 size 13584 bytes |
45 files
EXE2c451e5a3635ecd40ebd4a824267ea69
Structure
P7B[Authenticode]_15d517b1.p7b
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account