1apEoaC4M5a.sys| Category | Machine | Started | Completed |
|---|---|---|---|
| FILE | s1_win7_x6402 | July 26, 2021, 9:25 a.m. | July 26, 2021, 9:29 a.m. |
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
| IP Address | Status | Action |
|---|---|---|
| 164.124.101.2 | Active | Moloch |
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
| pdb_path | E:\å·¨çµé©±å¨æºç \PacSys\x64\Debug\Pac.pdb |
| section | PAGE |
| section | INIT |
| section | .tKD0 |
| ESET-NOD32 | Win64/Agent.ARD |
| Kaspersky | Trojan.Win64.MalDrv.bj |
| BitDefender | Trojan.GenericFCA.Agent.10615 |
| MicroWorld-eScan | Trojan.GenericFCA.Agent.10615 |
| MAX | malware (ai score=89) |
| Rising | Rootkit.Agent!1.D180 (CLASSIC) |
| Fortinet | W64/MalDrv.BJ!tr |
| section | {u'size_of_data': u'0x00001a00', u'virtual_address': u'0x000bd000', u'entropy': 7.788909331710866, u'name': u'.pdata', u'virtual_size': u'0x000018c0'} | entropy | 7.78890933171 | description | A section with a high entropy has been found | |||||||||
| section | {u'size_of_data': u'0x00118800', u'virtual_address': u'0x000c1000', u'entropy': 6.90390848014672, u'name': u'.tKD0', u'virtual_size': u'0x00118758'} | entropy | 6.90390848015 | description | A section with a high entropy has been found | |||||||||
| entropy | 0.603153393907 | description | Overall entropy of this PE file is high | |||||||||||