Suspicious
Suspect

4b793e2cc6237af40223008abee9fbc4

PE Executable
MD5: 4b793e2cc6237af40223008abee9fbc4
Size: 8.68 MB
application/x-dosexec

This sample is a 8.3 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 19 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
910b1b8321c96fb5e8dc314d791377b4dad20b8d6599db071f0651ecc938ebad
MD5
4b793e2cc6237af40223008abee9fbc4
Verdict
Inconclusive
File type
PE Executable · 8.3 MB

Cite this report: https://app.malva.re/sha256/910b1b8321c96fb5e8dc314d791377b4dad20b8d6599db071f0651ecc938ebad

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
8.68 MB · 8,680,512 B
First seen
2026-10-22 21:30 · 10 days ago
Last seen
2026-10-22 21:30 · 10 days ago
Last analysis
2026-10-22 21:30 · 10 days ago
Hashes
MD5 4b793e2cc6237af40223008abee9fbc4 Sha1 52e3eac02535422e73bfd66ec0bbab2b80249345 Sha256 910b1b8321c96fb5e8dc314d791377b4dad20b8d6599db071f0651ecc938ebad Sha384 fc8de56649096404cc5e3ff9e0f8ea3bff3c1a93b5468493a2ae9aa29fe09353f74aba146f39a15a1ad58872041ba565 Sha512 f886a0c368a71067b41f27042eec47c85406fea0153baedd13a0ac756600b6cd6cedc38e957c6601636daf26ce2173329af907e3e09dfdbf98ddbe419bfa4678 SSDeep 196608:gLrBprJk2incHlnrZrVhcsgb5QPG4Cfd2:gRs0HxhcFQnCV2 TLSH 8996233BB268B53FD56E0B3246B392204D3BAA65A41A8C2F47F4050DCF665701F3FA56
Detection
PeID
Borland Delphi 4.0Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12

19 files
EXE4b793e2cc6237af40223008abee9fbc4
Structure
P7B[Authenticode]_87b7975e.p7b
BINResources
BINRT_ICON
BINID:0001
BINID:1033
BINRT_STRING
BINID:0FF6
BINID:0
BINID:0FF7
BINID:0
BINID:0FF8
BINID:0
BINID:0FF9
BINID:0
BINID:0FFA
BINID:0
BINID:0FFB
BINID:0
BINID:0FFC
BINID:0
BINID:0FFD
BINID:0
BINID:0FFE
BINID:0
BINID:0FFF
BINID:0
BINID:1000
BINID:0
BINRT_RCDATA
BINID:0000
BINID:0
BINID:2B67
BINID:0
BINRT_GROUP_CURSOR4
BINID:0000
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2

Name Value
Info
Authenticode present at 0x844A20 size 10784 bytes

19 files
EXE4b793e2cc6237af40223008abee9fbc4
Structure
P7B[Authenticode]_87b7975e.p7b
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙