Suspicious
Suspect

PE Executable
MD5: 6b171ffcdfc4ed67c3ce25bd1cc534d6
Size: 577.53 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 6b171ffcdfc4ed67c3ce25bd1cc534d6
Sha1 85a757a4cea03885367f8677f976c634e67ca94b
Sha256 16ac0b5d2b25528812c2e6bbe94b9e266b37be6aa56db97192def60a74e63dbe
Sha384 2592b859e3cba35e5b09e786818fb3ad81eb375e2569046b8b8beb71693cd98e5002781d38473ed99fe551d49ebf9fad
Sha512 33c70a385cf04d537177e0a60bfda7b6697acc3efbbfbd210876c85b8d5344b44f146d0252a8fd354577578cebcbd9aa7b68b25bcbbb9c2471d41e6cc562226a
SSDeep 12288:iANwRo+mv8QD4+0V16mO8qCxY7RsZyle28OOKw+qGL8JwpfjhE/oRjM8cIQYrzUl:iAT8QE+kVqwq8JwpfjhEaA8RLpWR1Xig
TLSH 85C4B02EA2427231C44535B40CA3A369F722BD8C123EC6FDA5D97F06DAEF15439A9347
PeID
BobSoft Mini Delphi -> BoB / BobSoftBorland Delphi 2006Borland Delphi 2006 - 2007Borland Delphi 4.0Borland Delphi v3.0Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12
Overlay_f45ccf77.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
CODE
DATA
BSS
.idata
.tls
.rdata
.reloc
.rsrc
Resources
RT_ICON
ID:0032
ID:0
ID:0033
ID:0
ID:0034
ID:0
ID:0035
ID:0
ID:0036
ID:0
ID:0037
ID:0
ID:0038
ID:0
ID:0039
ID:0
ID:003A
ID:0
ID:003B
ID:0
ID:003C
ID:0
ID:003D
ID:0
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:0000
ID:0
RT_VERSION
ID:0001
ID:1049
RT_MANIFEST
ID:0001
ID:1049
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_f45ccf77.bin (229373 bytes)
Overlay_f45ccf77.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
CODE
DATA
BSS
.idata
.tls
.rdata
.reloc
.rsrc
Resources
RT_ICON
ID:0032
ID:0
ID:0033
ID:0
ID:0034
ID:0
ID:0035
ID:0
ID:0036
ID:0
ID:0037
ID:0
ID:0038
ID:0
ID:0039
ID:0
ID:003A
ID:0
ID:003B
ID:0
ID:003C
ID:0
ID:003D
ID:0
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:0000
ID:0
RT_VERSION
ID:0001
ID:1049
RT_MANIFEST
ID:0001
ID:1049
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙