popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

RFQ 6020943651-FOR-ATENS.xls.xll

Generic Malware UPX Malicious Library PE64 PE File DLL OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6402 Aug. 3, 2021, 10:03 a.m. Aug. 3, 2021, 10:03 a.m.
Size 879.5KB
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 2344d5013ae84f4d70bf359575fba402
SHA256 338ffcde4891ef19f8b2974f2a9188e14a90f592322c8fb07acb662b57b35771
CRC32 6C90E101
ssdeep 24576:pzbGHAzHAjX1lcLgUarYin3qy8sCwFCvlFC:pziHIvEzn3qy8QFW
PDB Path C:\Work\Excel-DNA\ExcelDna\Source\ExcelDna\Release64\ExcelDna64.pdb
Yara
  • IsPE64 - (no description)
  • PE_Header_Zero - PE File Signature
  • OS_Processor_Check_Zero - OS Processor Check
  • Generic_Malware_Zero - Generic Malware
  • IsDLL - (no description)
  • UPX_Zero - UPX packed file
  • Malicious_Library_Zero - Malicious_Library

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path C:\Work\Excel-DNA\ExcelDna\Source\ExcelDna\Release64\ExcelDna64.pdb
section .gfids
resource name ASSEMBLY
resource name ASSEMBLY_LZMA
resource name DNA
section {u'size_of_data': u'0x0007d200', u'virtual_address': u'0x00077000', u'entropy': 7.78352600834448, u'name': u'.rsrc', u'virtual_size': u'0x0007d0e0'} entropy 7.78352600834 description A section with a high entropy has been found
entropy 0.569721115538 description Overall entropy of this PE file is high
Lionic Trojan.MSIL.Agent.4!c
Cynet Malicious (score: 100)
McAfee RDN/Generic.dx
Zillya Trojan.Crypt.Win32.60233
Alibaba Trojan:MSIL/Generic.8233a704
Cyren W64/Trojan.BZBO-4373
Symantec Trojan.Gen.MBT
Kaspersky HEUR:Trojan.MSIL.Agent.gen
McAfee-GW-Edition BehavesLike.Win64.Trojan.cc
Sophos Mal/Generic-S
GData Trojan.GenericKD.37336311
Jiangmin Trojan.MSIL.aeqed
Kingsoft Win32.Troj.Undef.(kcloud)
Gridinsoft Trojan.Win64.Agent.oa!s1
ZoneAlarm HEUR:Trojan.MSIL.Agent.gen
Microsoft Trojan:Win32/Woreflint.A!cl
Panda PUP/Generic
Yandex Trojan.DOTHETUK!59xMQMvn7qc
Fortinet W32/Agent!tr
AVG Win64:Malware-gen
Avast Win64:Malware-gen
Qihoo-360 Win64/Trojan.Generic.HggASZkA