popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Enq.xll.exe

Generic Malware UPX Malicious Library PE64 PE File DLL OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6402 Aug. 5, 2021, 10:54 a.m. Aug. 5, 2021, 10:54 a.m.
Size 940.0KB
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 8fa502b4a09f8f304b267f9c70e18de5
SHA256 a079a5f2f540af4d43166a83f506e0da0e58201ffb55c05fd24b6532fe9ecefe
CRC32 5073694A
ssdeep 24576:QzbGHAzHKjX1gBY4ZyrE7K3yl8PeVooA/AB2LEgpUqWriNFlHhfWIqZa/zOyZ7:QziHIipU/rqhFWIO8KyJ
PDB Path C:\Work\Excel-DNA\ExcelDna\Source\ExcelDna\Release64\ExcelDna64.pdb
Yara
  • IsPE64 - (no description)
  • PE_Header_Zero - PE File Signature
  • OS_Processor_Check_Zero - OS Processor Check
  • Generic_Malware_Zero - Generic Malware
  • IsDLL - (no description)
  • UPX_Zero - UPX packed file
  • Malicious_Library_Zero - Malicious_Library

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path C:\Work\Excel-DNA\ExcelDna\Source\ExcelDna\Release64\ExcelDna64.pdb
section .gfids
resource name ASSEMBLY
resource name ASSEMBLY_LZMA
resource name DNA
section {u'size_of_data': u'0x0008c400', u'virtual_address': u'0x00077000', u'entropy': 7.823671375899182, u'name': u'.rsrc', u'virtual_size': u'0x0008c390'} entropy 7.8236713759 description A section with a high entropy has been found
entropy 0.597444089457 description Overall entropy of this PE file is high
Lionic Trojan.MSIL.Agent.4!c
MicroWorld-eScan Trojan.GenericKD.37341605
FireEye Trojan.GenericKD.37341605
Zillya Trojan.Crypt.Win32.60233
Alibaba TrojanDropper:Win64/FormBook.1ed6330c
K7GW Trojan ( 005806331 )
K7AntiVirus Trojan ( 005806331 )
Arcabit Trojan.Generic.D239C9A5
Cyren W64/Trojan.DJFS-5314
Symantec Trojan.Gen.MBT
ESET-NOD32 Win64/TrojanDropper.Agent.EE
Kaspersky HEUR:Trojan.MSIL.Agent.gen
BitDefender Trojan.GenericKD.37341605
Avast Win64:Trojan-gen
Ad-Aware Trojan.GenericKD.37341605
Emsisoft Trojan.GenericKD.37341605 (B)
DrWeb Trojan.MulDrop18.11612
McAfee-GW-Edition Artemis!Trojan
Sophos Mal/Generic-S
Jiangmin Trojan.MSIL.aeqed
Webroot W32.Malware.Gen
MAX malware (ai score=81)
Kingsoft Win32.Troj.Undef.(kcloud)
Gridinsoft Trojan.Win64.Agent.oa!s1
Microsoft Trojan:Win32/Wacatac.B!ml
ZoneAlarm HEUR:Trojan.MSIL.Agent.gen
GData Trojan.GenericKD.37341605
Cynet Malicious (score: 100)
McAfee RDN/GenericM
Tencent Msil.Trojan.Agent.Efbh
Yandex Trojan.DOTHETUK!59xMQMvn7qc
Fortinet W32/Agent!tr
AVG Win64:Trojan-gen
Panda Trj/CI.A
Qihoo-360 Win64/Trojan.Generic.H8sACnEA