Scan Result: 515e1e1415703...4fd203818b5a2

Sample Information

SHA256
Sample Name
File Size

452.0 KB 462848 Bytes

First Seen

2024-11-19 12:14 UTC+0000 1 year, 4 months ago.

General
MIME Type
MD5 Hash
Architecture x86 (PE32)
Compile Time

1992-06-19 10:22 33 years, 9 months ago.

Image Base 0x400000
Entry Point 0x55d04
PEID Signatures
  • Borland_Delphi_40_additional
  • Microsoft_Visual_Cpp_v50v60_MFC
  • Borland_Delphi
  • Borland_Delphi_30_additional
  • Borland_Delphi_30_
  • Borland_Delphi_Setup_Module
  • Borland_Delphi_40
  • Borland_Delphi_v40_v50
  • Borland_Delphi_v30
  • Borland_Delphi_DLL
Important Imports

Matching Rules

Rule Name Rule Type
Detect GetForegroundWindow Usage YARA
Detect Encryption Artifacts YARA
Detect Anti-Unpacking Techniques YARA
Detect Interrupts 2 YARA
Detect CloseHandle / NtClose Usage YARA
Detect XOR Encoded Malicious Patterns YARA

Matching Techniques

Technique Name Technique ID's Categories Snippet(s) Rules(s)
Cryptography U0703 E1027.m04
Wiping or Encrypting U0301
Anti-UPX Unpacking U1008
UPX: Ultimate Packer for Executables U1402 F0001.008
INT3 Instruction Scanning U0105 B0001.025
INT 0x2D U0129 B0001.006
ICE 0xF1 U0130
CloseHandle, NtClose U0114 B0001.003
XOR Operation U0701 E1027.m02

Scan Another File