Sign up free
Suspicious
Suspect

ef00a57d25f82b42d5c8b5876f6d915b

Share on LinkedIn
Print
PE Executable
MD5: ef00a57d25f82b42d5c8b5876f6d915b
Size: 5.18 MB
application/x-dosexec

This sample is a 4.9 MB PE Executable. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature among its 403 YARA rules. Static analysis extracted 18 embedded or derived files. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.

SHA256
ad79724d715fdb9f02458bfddff880378500ceffcd202032666ce8144d6ad4f4
MD5
ef00a57d25f82b42d5c8b5876f6d915b
Verdict
No known threat found
File type
PE Executable · 4.9 MB

Cite this report: https://app.malva.re/sha256/ad79724d715fdb9f02458bfddff880378500ceffcd202032666ce8144d6ad4f4

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
5.18 MB · 5,182,146 B
First seen
2026-09-30 21:45 · one month ago
Last seen
2026-09-30 21:45 · one month ago
Last analysis
2026-09-30 21:45 · one month ago
Hashes
MD5 ef00a57d25f82b42d5c8b5876f6d915b Sha1 624b1ec9a00a2c26b679e7b370a6edf6bbfe04ff Sha256 ad79724d715fdb9f02458bfddff880378500ceffcd202032666ce8144d6ad4f4 Sha384 421f722e7b26e7fbabefc0bd9d1999e381f62bfdb4cc0732f109837b65c228c7cd697f40886f5a3c42695f32141f4298 Sha512 880a13602ec95e3727d92c6e06069a1e371bdb0dcf850c39cc833443e524eb02b903e97cf86ec07ba7809df9e9f47a010d03ba43538a4bed7cad8832b5f0df0d SSDeep 98304:Y9KJ5iljV3p6r2tNta/O8p7XV1otPQuUQb+uoogjU25GZokQa2iEcZcX4d:YwnsB3DGd7FEQuUQbXwkQhcZ1d TLSH DC363313778B44B8F4548570CAE44D11FF933CBE29E29A186E35E90E69B9DD40D3BA23
Detection
PeID
Borland Delphi 4.0Inno Setup Module [SFX] - v.5.x - 6.0 Borland Delphi - ASL Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12

18 files
EXEef00a57d25f82b42d5c8b5876f6d915b
Structure
BINOverlay_085fa8ef.bin
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2

Name Value
Info
Overlay extracted: Overlay_085fa8ef.bin (5060802 bytes)

An error has occurred. This application may no longer respond until reloaded. Reload 🗙