Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5: cbfdbc1d9b1e209ca437e05daf56b6b5
Size: 1.13 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 cbfdbc1d9b1e209ca437e05daf56b6b5
Sha1 f49caa29e9b1e8290809a0f2cc6318722ae130b9
Sha256 6a888b80f5cd2f7df79fdb229f8af179372ba1d63f9f3cb46d03234b7e801033
Sha384 5681e6cfb93b35e79bfccd6ef7398e3eabb6d2c95130d73a6b150a5253ee1232e889890949f7a369081bfc3700240dd7
Sha512 9991655803be23550143a78c808efab0b21c63e09e6f30c5a28c9eb2498252f267b51a9e87601f90bb2875b1f866d815ffb76c98198413d3286ca1782df6dfb0
SSDeep 24576:/X48QE+U5b5nOkQmqdscwa+B4oMyiovDFZxQVhg6etCLj7DFQt+uieM5Mc7x/ic6:/Xz+sok4dHwJN20LkDD2+U0Mqx36
TLSH 74350269E5032231D10352B44CC7827AB535FF485A66D9CFB6D81F09DB332EB266938E
PeID
BobSoft Mini Delphi -> BoB / BobSoftBorland Delphi 2006Borland Delphi 2006 - 2007Borland Delphi 4.0Borland Delphi v3.0Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12
cbfdbc1d9b1e209ca437e05daf56b6b5
Overlay_a47db882.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
CODE
DATA
BSS
.idata
.tls
.rdata
.reloc
.rsrc
Resources
RT_ICON
ID:0032
ID:0
ID:0033
ID:0
ID:0034
ID:0
ID:0035
ID:0
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:0000
ID:0
RT_VERSION
ID:0001
ID:1049
RT_MANIFEST
ID:0001
ID:1049
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_a47db882.bin (942268 bytes)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙