Suspicious
Suspect

3c78a693ff52e7d2b7657f83732e2daa

PE Executable
MD5: 3c78a693ff52e7d2b7657f83732e2daa
Size: 364.31 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 3c78a693ff52e7d2b7657f83732e2daa
Sha1 d58daeada8844e5ee41359e086fac90bb2d682a7
Sha256 cba4f3ab067afff8a8fd33ffb3ae6128fe19d0ce73e058113f66aa85b5a66ab8
Sha384 5046b76394b53910119c821d597dd98b6a392f97be8e29fd2cbdb9cebddabfffc1193a9d682efc4615a905843b20a200
Sha512 0bd5523c22160e34d1abbd5210e95b82a131b523c7b6b7e57123c0e52c59d3ba5d7116d867dfbf6d52323b106040adaf7fc15cbdc0b9bfeb2ad5b57865ead39c
SSDeep 6144:SZABbWqsE/Ao+mv8Qv0LVmwq4FU0fNoy6fp1pdhWsCaUUf:UANwRo+mv8QD4+0V16fp1EsCaU2
TLSH 7074F615612251F1C2315E300BD281ABA5E7B97879378DCAE3F42B04BEEF9952D1CE4B
PeID
BobSoft Mini Delphi -> BoB / BobSoftBorland Delphi 2006Borland Delphi 2006 - 2007Borland Delphi 4.0Borland Delphi v3.0Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12
Overlay_bebf341b.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
CODE
DATA
BSS
.idata
.tls
.rdata
.reloc
.rsrc
Resources
RT_ICON
ID:0032
ID:0
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:0000
ID:0
RT_VERSION
ID:0001
ID:1049
RT_MANIFEST
ID:0001
ID:1049
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_bebf341b.bin (119573 bytes)
Overlay_bebf341b.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
CODE
DATA
BSS
.idata
.tls
.rdata
.reloc
.rsrc
Resources
RT_ICON
ID:0032
ID:0
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:0000
ID:0
RT_VERSION
ID:0001
ID:1049
RT_MANIFEST
ID:0001
ID:1049
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙