Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5: 4360bb5a487fa07cec427e6a26c5e287
Size: 525.39 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 4360bb5a487fa07cec427e6a26c5e287
Sha1 2f15a14528698767f617c9f0508e2fe41be991cb
Sha256 b3b6f660bc37e1ece5e638dfdaf87b97899df972f6cebe5062fd964142b1fcce
Sha384 620f46370492d1c052356f5089b119fb145139a1bb35e827fda8f3b5cacb7cf99a9c60ad69871e1b48d12da97c9610a3
Sha512 7908507a4a0d9ef0ae8c3cc8cb1e809e06ad8132086fff24ccb8a924d60263d11d84ccf6fb5b03800b931e5fa86f0ce9f07ad7f529cbc59fe0f8deaca7a57b19
SSDeep 12288:WANwRo+mv8QD4+0V16LTGn9Kw+3X+DjV6QC:WAT8QE+kITGn9U3X+DO
TLSH 5AB4D022B6022271D81182304CD7816ABE35FE388A65D9CF71D87F1ACB731E7552E79E
PeID
BobSoft Mini Delphi -> BoB / BobSoftBorland Delphi 2006Borland Delphi 2006 - 2007Borland Delphi 4.0Borland Delphi v3.0Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12
4360bb5a487fa07cec427e6a26c5e287
Overlay_09a4c966.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
CODE
DATA
BSS
.idata
.tls
.rdata
.reloc
.rsrc
Resources
RT_ICON
ID:0032
ID:0
ID:0033
ID:0
ID:0034
ID:0
ID:0035
ID:0
ID:0036
ID:0
ID:0037
ID:0
ID:0038
ID:0
ID:0039
ID:0
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:0000
ID:0
RT_VERSION
ID:0001
ID:1049
RT_MANIFEST
ID:0001
ID:1049
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_09a4c966.bin (186441 bytes)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙