Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
PeID
Borland Delphi 7 - Nstd EP - ASL sign
b1f128efa592ec00cae6c752e71b71db
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
CODE
DATA
BSS
.idata
.tls
.rdata
.reloc
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
RT_RCDATA
ID:0000
ID:0
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
UPX2
.text
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:0
.Net Resources
{f4f5d655-d3f5-4ecf-9a53-3a2fe4afba9b}
RnsC:
Z0Az>S7ceT;H}HL:0Y$.resources
logoPictureBox.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
ls
p0l#ez"6 r wkmcf=YU"'%.resources
$this.Icon
[NBF]root.IconData
?18Z
,YcTt5!
+UrJh7sHJBcb9(.resources
{c61cd46d-9d75-437f-8270-5249854f931f}

{5a3e54c3-0556-4780-bd19-e692c4c55323}
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
Name Value
Info
PE Detect: PeReader OK (file layout)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙