The PasswordDepot exe (Password Depot) AceBIT File Malware Analysis

The PasswordDepot.exe (Password Depot) File Analysis

Updated 1 day ago

Checked by Malaware Check

PasswordDepot.exe

Hash Type	Value	Action
MD5	8689d9f448975e16b47f1b1575800150
SHA1	2537f64b8f271935dbcfe3a9d4c6bbc90443551c
SHA256	e9ac38903702575e5be0ee49ec9b5908b7bdb58112a5e9ca22e9fae4fe91c943
SHA512	204f2b5d42718cc0a06ff8732ceaf83ff74de4fa8e9a4c2952bb4947675e49b0924edff4137594132475db5543fd145a724b86d4d41852ef8498af83fdd6872f
ImpHash	06209b68dba4df25ac1e0c17f681bd8e

Hash Type

Value

Action

MD5

8689d9f448975e16b47f1b1575800150

SHA1

2537f64b8f271935dbcfe3a9d4c6bbc90443551c

SHA256

e9ac38903702575e5be0ee49ec9b5908b7bdb58112a5e9ca22e9fae4fe91c943

SHA512

204f2b5d42718cc0a06ff8732ceaf83ff74de4fa8e9a4c2952bb4947675e49b0924edff4137594132475db5543fd145a724b86d4d41852ef8498af83fdd6872f

ImpHash

06209b68dba4df25ac1e0c17f681bd8e

PE Analysis

Basic Information

▼

Icon	Hash: 0cbd021f76fd5ad991e28faebcc88f1c Fuzzy: 03e5904e5b593977054319db4252cf0b dHash: fcc64341543498c4
Image Base	`0x00400000`
Entry Point	`0x0232072f`
Compilation Time	2024-09-02 15:28:16
Checksum	0x00b67650 (Actual: 0x00b67650)
OS Version	6.0
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	30 libraries
Exports	3 functions
Resources	1200 Resources
Sections	15 Sections

Version Information

▼

CompanyName	AceBIT
FileDescription	Password Depot
FileVersion	17.2.4.0
LegalCopyright	© 1998-2024 by AceBIT GmbH
ProgramID	com.embarcadero.PasswordDepot
ProductName	Password Depot
ProductVersion	17.2.4
Translation	0x0409 0x04e4

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	18,326,388 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`D41D8CD98F00B204E9800998ECF8427E`
`.data`	`0x0117c000`	1,621,280 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.bss`	`0x01308000`	198,452 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x01339000`	28,392 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.didata`	`0x01340000`	6,646 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.edata`	`0x01342000`	159 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`D41D8CD98F00B204E9800998ECF8427E`
`.tls`	`0x01343000`	688 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x01344000`	109 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`D41D8CD98F00B204E9800998ECF8427E`
`.YKT`	`0x01345000`	823,324 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`D41D8CD98F00B204E9800998ECF8427E`
`.pdata`	`0x0140f000`	880,644 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`D41D8CD98F00B204E9800998ECF8427E`
`.Zf[`	`0x014e7000`	1,338,952 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`D41D8CD98F00B204E9800998ECF8427E`
`.S62`	`0x0162e000`	8,088 bytes	8,192 bytes	3.36 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`E801C9822ADCD25893AEC6BA31A5284A`
`.]hV`	`0x01630000`	11,592,476 bytes	11,592,704 bytes	7.91 (Packed/Encrypted)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_NOT_PAGED\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`7C2D5261179103165001E0A374CB0068`
`.reloc`	`0x0213f000`	160 bytes	512 bytes	1.76 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`BD7C7B9DFDA67013CEE4B2A9FB605E4E`
`.rsrc`	`0x02140000`	5,113,812 bytes	303,104 bytes	4.39 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`F4972B5258A47601AA74C1F8F52DA5D2`

Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼

Total Resources: 1200 (5,023,361 bytes)

Resource Type	Count	Total Size	Percentage
HTML	3	12,713 bytes	0.3%
TYPELIB	1	2,564 bytes	0.1%
WAVE	2	141,152 bytes	2.8%
RT_CURSOR	36	420,488 bytes	8.4%
RT_BITMAP	92	133,964 bytes	2.7%
RT_ICON	42	210,117 bytes	4.2%
RT_DIALOG	2	164 bytes	0%
RT_STRING	93	100,360 bytes	2%
RT_RCDATA	895	3,998,092 bytes	79.6%
RT_GROUP_CURSOR	22	608 bytes	0%
RT_GROUP_ICON	10	648 bytes	0%
RT_VERSION	1	688 bytes	0%
RT_MANIFEST	1	1,803 bytes	0%

Certificate Chain Analysis

▼

Certificate Information

Product	Password Depot
Description	Password Depot
File Version	17.2.4.0
Copyright	© 1998-2024 by AceBIT GmbH

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	PasswordDepot.exe
File Type	PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version	1.0.217.174
Database Version	2025-06-03 17:00:20 UTC

The PasswordDepot.exe (Password Depot) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification