dubi.exe

The executable contains unknown PE section names indicative of a packer (could be a false positive) (3 events)

section	.kefo
section	.zokohef
section	.new

The file contains an unknown PE resource name possibly indicative of a packer (1 event)

resource name

None

Allocates read-write-execute memory (usually to unpack itself) (2 events)

Time & API	Arguments	Status	Return	Repeated
NtProtectVirtualMemory April 10, 2021, 9:01 a.m.	process_identifier: 2244 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 593920 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x01860000 process_handle: 0xffffffff	1	0	0
NtAllocateVirtualMemory April 10, 2021, 9:01 a.m.	process_identifier: 2244 region_size: 1155072 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x019c0000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1	0	0

The binary likely contains encrypted or compressed data indicative of a packer (2 events)

section	{u'size_of_data': u'0x000b2a00', u'virtual_address': u'0x00001000', u'entropy': 7.919950016115085, u'name': u'.text', u'virtual_size': u'0x000b299a'}				entropy	7.91995001612				description	A section with a high entropy has been found
entropy	0.933376877858				description	Overall entropy of this PE file is high

File has been identified by 30 AntiVirus engines on VirusTotal as malicious (30 events)

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
McAfee	Packed-GBF!7D828DF10C7F
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
ESET-NOD32	a variant of Win32/GenKryptik.FDVZ
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	UDS:Trojan-Ransom.Win32.Stop.gen
Avast	Win32:DropperX-gen [Drp]
Tencent	Win32.Trojan.Raas.Auto
Sophos	ML/PE-A
McAfee-GW-Edition	BehavesLike.Win32.Generic.bc
FireEye	Generic.mg.7d828df10c7f01c5
Ikarus	Trojan.Crypt
Webroot	W32.Malware.Gen
AegisLab	Trojan.Win32.Mokes.m!c
Microsoft	Trojan:Win32/Ranumbot.RF!MTB
Acronis	suspicious
VBA32	BScope.Trojan.Wacatac
Malwarebytes	Trojan.MalPack.GS
Rising	Trojan.Kryptik!1.D4B0 (CLOUD)
SentinelOne	Static AI - Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Kryptik.HKIW!tr
BitDefenderTheta	Gen:NN.ZexaF.34670.VCW@am!0Lwic
AVG	Win32:DropperX-gen [Drp]
CrowdStrike	win/malicious_confidence_90% (W)
Qihoo-360	HEUR/QVM10.1.7A9B.Malware.Gen