Suspicious
Suspect

PE Executable
MD5: cbfdbc1d9b1e209ca437e05daf56b6b5
Size: 1.13 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 cbfdbc1d9b1e209ca437e05daf56b6b5
Sha1 f49caa29e9b1e8290809a0f2cc6318722ae130b9
Sha256 6a888b80f5cd2f7df79fdb229f8af179372ba1d63f9f3cb46d03234b7e801033
Sha384 5681e6cfb93b35e79bfccd6ef7398e3eabb6d2c95130d73a6b150a5253ee1232e889890949f7a369081bfc3700240dd7
Sha512 9991655803be23550143a78c808efab0b21c63e09e6f30c5a28c9eb2498252f267b51a9e87601f90bb2875b1f866d815ffb76c98198413d3286ca1782df6dfb0
SSDeep 24576:/X48QE+U5b5nOkQmqdscwa+B4oMyiovDFZxQVhg6etCLj7DFQt+uieM5Mc7x/ic6:/Xz+sok4dHwJN20LkDD2+U0Mqx36
TLSH 74350269E5032231D10352B44CC7827AB535FF485A66D9CFB6D81F09DB332EB266938E
PeID
BobSoft Mini Delphi -> BoB / BobSoftBorland Delphi 2006Borland Delphi 2006 - 2007Borland Delphi 4.0Borland Delphi v3.0Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12
Overlay_a47db882.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
CODE
DATA
BSS
.idata
.tls
.rdata
.reloc
.rsrc
Resources
RT_ICON
ID:0032
ID:0
ID:0033
ID:0
ID:0034
ID:0
ID:0035
ID:0
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:0000
ID:0
RT_VERSION
ID:0001
ID:1049
RT_MANIFEST
ID:0001
ID:1049
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_a47db882.bin (942268 bytes)
Overlay_a47db882.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
CODE
DATA
BSS
.idata
.tls
.rdata
.reloc
.rsrc
Resources
RT_ICON
ID:0032
ID:0
ID:0033
ID:0
ID:0034
ID:0
ID:0035
ID:0
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:0000
ID:0
RT_VERSION
ID:0001
ID:1049
RT_MANIFEST
ID:0001
ID:1049
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙