Suspect
64cb87c8dc251fd2220f53ca144ffeea
PE Executable
MD5: 64cb87c8dc251fd2220f53ca144ffeea
Size: 632.08 KB
application/x-dosexec
This sample is a 617.3 KB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 51 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- cf4652172e2bab694d5bd9e93cac3995205ea109e09c8799c25b3f7917638b5e
- MD5
- 64cb87c8dc251fd2220f53ca144ffeea
- Verdict
- Inconclusive
- File type
- PE Executable · 617.3 KB
Cite this report: https://app.malva.re/sha256/cf4652172e2bab694d5bd9e93cac3995205ea109e09c8799c25b3f7917638b5e
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
632.08 KB · 632,080 B
First seen
2026-07-04 14:46 · 3 months ago
Last seen
2026-07-04 14:46 · 3 months ago
Last analysis
2026-07-05 08:56 · 3 months ago
Hashes
MD5
64cb87c8dc251fd2220f53ca144ffeea
Sha1
ec1bd15c2f84a83ac8601f3aa419cafa6d9df602
Sha256
cf4652172e2bab694d5bd9e93cac3995205ea109e09c8799c25b3f7917638b5e
Sha384
5c81a31e43a8ee58035aa09aa9496ee933dff394b58f6e31462c0d60d269650c939e8767162a455bb4336d02ca3f6ae9
Sha512
d668cea7cd92ceaae069f7f8c260a2ecd4fc342a0afe4b9ae115578df0b58b11dd7c2c05a8ba98848840f3c08e50a2ef8f810e60e8c48539914f84b28962b1e1
SSDeep
12288:QO2zYM2Ewv2XwPwMpV8sEqkR6FtQcGTVEPVwjo47aUyqIpl:D5Mcv00Te7R6FtxkENKn7a1
TLSH
7DD49E26F6E88433D2632A388D1B96B4983BBD703D295C462AE47C8C5E3BF4135553B7
Detection
PeID
BobSoft Mini Delphi -> BoB / BobSoftBorland DelphiBorland Delphi 2006Borland Delphi 2006 - 2007Borland Delphi 4.0Borland Delphi v3.0Borland Delphi v3.0 - v7.0Borland Delphi v6.0 - v7.0Borland Delphi v6.0 - v7.0Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12
42 files
EXE64cb87c8dc251fd2220f53ca144ffeea
Structure
P7B[Authenticode]_15d517b1.p7b
BINResources
BINRTIRTWERQQ
BINID:0000
BINID:1033
BINRT_CURSOR
BINID:0001
BINID:0
BINID:0002
BINID:0
BINID:0003
BINID:0
BINID:0004
BINID:0
BINID:0005
BINID:0
BINID:0006
BINID:0
BINID:0007
BINID:0
BINRT_BITMAP
BINID:0000
BINID:0
BINRT_ICON
BINID:0001
BINID:1033
BINRT_DIALOG
BINID:0000
BINID:0
BINRT_STRING
BINID:0FEE
BINID:0
BINID:0FEF
BINID:0
BINID:0FF0
BINID:0
BINID:0FF1
BINID:0
BINID:0FF2
BINID:0
BINID:0FF3
BINID:0
BINID:0FF4
BINID:0
BINID:0FF5
BINID:0
BINID:0FF6
BINID:0
BINID:0FF7
BINID:0
BINID:0FF8
BINID:0
BINID:0FF9
BINID:0
BINID:0FFA
BINID:0
BINID:0FFB
BINID:0
BINID:0FFC
BINID:0
BINID:0FFD
BINID:0
BINID:0FFE
BINID:0
BINID:0FFF
BINID:0
BINID:1000
BINID:0
BINRT_RCDATA
BINID:0000
BINID:0
BINRT_GROUP_CURSOR2
BINID:7FF9
BINID:0
BINID:7FFA
BINID:0
BINID:7FFB
BINID:0
BINID:7FFC
BINID:0
BINID:7FFD
BINID:0
BINID:7FFE
BINID:0
BINID:7FFF
BINID:0
BINRT_GROUP_CURSOR4
BINID:0000
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
| Name | Value |
|---|---|
| Info | Authenticode present at 0x97000 size 13584 bytes |
42 files
EXE64cb87c8dc251fd2220f53ca144ffeea
Structure
P7B[Authenticode]_15d517b1.p7b
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account