field.php

The executable contains unknown PE section names indicative of a packer (could be a false positive) (1 event)

section

.gfids

The binary likely contains encrypted or compressed data indicative of a packer (2 events)

section	{u'size_of_data': u'0x00015c00', u'virtual_address': u'0x00042000', u'entropy': 7.470737773837529, u'name': u'.rdata', u'virtual_size': u'0x00015a14'}				entropy	7.47073777384				description	A section with a high entropy has been found
entropy	0.207885304659				description	Overall entropy of this PE file is high

Communicates with host for which no DNS query was performed (1 event)

host	172.217.25.14

File has been identified by 20 AntiVirus engines on VirusTotal as malicious (20 events)

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
FireEye	Generic.mg.f126c14aa3de11c1
McAfee	Artemis!F126C14AA3DE
Cylance	Unsafe
APEX	Malicious
Kaspersky	UDS:Trojan.Win32.Witch.gen
Rising	Malware.Heuristic!ET#83% (RDMK:cmRtazp78f0NSWumXDB0d7a+ypY1)
TrendMicro	TrojanSpy.Win32.EMOTET.SMC5
McAfee-GW-Edition	BehavesLike.Win32.Generic.gh
Sophos	ML/PE-A
SentinelOne	Static AI - Malicious PE
Microsoft	Program:Win32/Wacapew.C!ml
Cynet	Malicious (score: 100)
BitDefenderTheta	Gen:NN.ZexaF.34670.AyW@aaCWJbfi
Malwarebytes	MachineLearning/Anomalous.100%
TrendMicro-HouseCall	TrojanSpy.Win32.EMOTET.SMC5
eGambit	Unsafe.AI_Score_71%
Paloalto	generic.ml
Qihoo-360	HEUR/QVM10.1.62DF.Malware.Gen