Suspect
ba886bfe54bff16c7bbd637da6d5f08c
PE Executable
MD5: ba886bfe54bff16c7bbd637da6d5f08c
Size: 1.3 MB
application/x-dosexec
This sample is a 1.2 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 14 embedded or derived files. It matches 2 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- cf342c9ddb0febd3bb4bc132d6a8fce3efa98f5ab481dfcc5202e0187e57481b
- MD5
- ba886bfe54bff16c7bbd637da6d5f08c
- Verdict
- Inconclusive
- File type
- PE Executable · 1.2 MB
Cite this report: https://app.malva.re/sha256/cf342c9ddb0febd3bb4bc132d6a8fce3efa98f5ab481dfcc5202e0187e57481b
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
1.3 MB · 1,304,572 B
First seen
2026-10-30 10:30 · 3 days ago
Last seen
2026-10-30 10:30 · 3 days ago
Last analysis
2026-10-30 10:30 · 3 days ago
Hashes
MD5
ba886bfe54bff16c7bbd637da6d5f08c
Sha1
39070eea7e8cf6c61ec5c703a615ff39a3cc2e1f
Sha256
cf342c9ddb0febd3bb4bc132d6a8fce3efa98f5ab481dfcc5202e0187e57481b
Sha384
74b04948eea90d7c3266b8fd67d2a4b3a4b4c02e347c9a83fb2504645c500f424bcfcbaa2ee79690f6037ec6b8ce5586
Sha512
3d34835e4cdcf9f763dd85a0f79ac1a14b89aa3c757ee63da2a229da5b5e4c0a433de047aa2c6b87b26cd224c8997a9bc73dd21e6ac15b2378fddff83cbc0cbc
SSDeep
24576:WAT8QE+kPOcHhiyVJCqK/JZhVtqAjyRMXdS:WAI+67sq0JnVLjykS
TLSH
0355122A724381B5C0510A35484FD2FABA35BF643F67428F72DA7B3D5C3624A5B232E5
Detection
PeID
BobSoft Mini Delphi -> BoB / BobSoftBorland Delphi 2006Borland Delphi 2006 - 2007Borland Delphi 4.0Borland Delphi v3.0Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12
14 files
EXEba886bfe54bff16c7bbd637da6d5f08c
Structure
BINOverlay_ceb5ffd3.bin
BINResources
BINRT_ICON
BINID:0032
BINID:0
BINID:0033
BINID:0
BINID:0034
BINID:0
BINID:0035
BINID:0
BINID:0036
BINID:0
BINID:0037
BINID:0
BINID:0038
BINID:0
BINID:0039
BINID:0
BINRT_RCDATA
BINID:0000
BINID:0
BINRT_GROUP_CURSOR4
BINID:0000
BINID:0
BINRT_VERSION
BINID:0001
BINID:1049
BINRT_MANIFEST
BINID:0001
BINID:1049
STICH
beta
No STICH Path has been generated for this analysis yet.
2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_ceb5ffd3.bin (965628 bytes) |
14 files
EXEba886bfe54bff16c7bbd637da6d5f08c
Structure
BINOverlay_ceb5ffd3.bin
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account