Suspect
ecb20bf55b95b24664cb83d9a15b9c97
PE Executable
MD5: ecb20bf55b95b24664cb83d9a15b9c97
Size: 2.13 MB
application/x-dosexec
This sample is a 2 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 21 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 9ba0ffb9e9cc6c0001239d647f5e5a5a7f22d162798c8312fc65e31cf55ce7ca
- MD5
- ecb20bf55b95b24664cb83d9a15b9c97
- Verdict
- Inconclusive
- File type
- PE Executable · 2 MB
Cite this report: https://app.malva.re/sha256/9ba0ffb9e9cc6c0001239d647f5e5a5a7f22d162798c8312fc65e31cf55ce7ca
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
2.13 MB · 2,132,080 B
First seen
2026-10-23 03:30 · 10 days ago
Last seen
2026-10-23 03:30 · 10 days ago
Last analysis
2026-10-23 03:30 · 10 days ago
Hashes
MD5
ecb20bf55b95b24664cb83d9a15b9c97
Sha1
2f96166fb355b92e4358bee0dd191b46501b1a70
Sha256
9ba0ffb9e9cc6c0001239d647f5e5a5a7f22d162798c8312fc65e31cf55ce7ca
Sha384
078c39176bc5a92334f9fd6794b9ed6f77678918061753c5284bcc64c63615a057c7e1837119d7abfd71f132b4908fad
Sha512
67dc46985715095a14c31ba1aa6a2a888b27d0ac2ea296edf88ac8066496dd6c8069703eeaaaddb40f40d932563e0b7f8c901206e28ad764275117e03d5eb510
SSDeep
24576:lXNrSLScusMmOvjjhzvLVAOgLgkcXjPeynRkIegf+Sve+9Cx+gBbfWzOUxSXc64a:muI2hREHcTeynRkfg7ve+AhrWzOUq
TLSH
4DA5D03FB28B653EE06E5A367A72E210583B7A6165138C5696F4C88CCF254701E3F787
Detection
PeID
Borland Delphi 7 - Nstd EP - ASL sign Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12
21 files
EXEecb20bf55b95b24664cb83d9a15b9c97
Structure
P7B[Authenticode]_115153ce.p7b
BINResources
BINRT_ICON
BINID:0064
IMGID:1033
IMGID:1033-preview.png
BINRT_STRING
BINID:0FF5
BINID:0
BINID:0FF6
BINID:0
BINID:0FF7
BINID:0
BINID:0FF8
BINID:0
BINID:0FF9
BINID:0
BINID:0FFA
BINID:0
BINID:0FFB
BINID:0
BINID:0FFC
BINID:0
BINID:0FFD
BINID:0
BINID:0FFE
BINID:0
BINID:0FFF
BINID:0
BINID:1000
BINID:0
BINRT_RCDATA
BINID:0000
BINID:0
BINID:2B67
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0000
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
STICH
beta
No STICH Path has been generated for this analysis yet.
3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2img
1| Name | Value |
|---|---|
| Info | Authenticode present at 0x205C00 size 11376 bytes |
21 files
EXEecb20bf55b95b24664cb83d9a15b9c97
Structure
P7B[Authenticode]_115153ce.p7b
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account