popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

PURCHASE ORDER AZAS112.xls.xll

Generic Malware UPX Malicious Library PE64 PE File DLL OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us Aug. 5, 2021, 10:56 a.m. Aug. 5, 2021, 10:57 a.m.
Size 880.0KB
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 4ebc548df517cae4c7e3122e9c75ede6
SHA256 6c67e1ccf77b872b1f3cf257a257d75c4995dc079945080f578b51357ccdbe55
CRC32 068AF1E2
ssdeep 24576:/zbGHAzHAjX1BcLgtBoKF0KihRPX0qFNE:/ziHILEV6Fm
PDB Path C:\Work\Excel-DNA\ExcelDna\Source\ExcelDna\Release64\ExcelDna64.pdb
Yara
  • IsPE64 - (no description)
  • PE_Header_Zero - PE File Signature
  • OS_Processor_Check_Zero - OS Processor Check
  • Generic_Malware_Zero - Generic Malware
  • IsDLL - (no description)
  • UPX_Zero - UPX packed file
  • Malicious_Library_Zero - Malicious_Library

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path C:\Work\Excel-DNA\ExcelDna\Source\ExcelDna\Release64\ExcelDna64.pdb
section .gfids
resource name ASSEMBLY
resource name ASSEMBLY_LZMA
resource name DNA
section {u'size_of_data': u'0x0007d400', u'virtual_address': u'0x00077000', u'entropy': 7.784454562905535, u'name': u'.rsrc', u'virtual_size': u'0x0007d288'} entropy 7.78445456291 description A section with a high entropy has been found
entropy 0.569965870307 description Overall entropy of this PE file is high
McAfee RDN/GenericU
K7AntiVirus Trojan ( 005804d81 )
Alibaba Trojan:MSIL/Generic.8233a704
K7GW Trojan ( 005804d81 )
Arcabit Trojan.Generic
Cyren W64/Agent.DFL.gen!Eldorado
Symantec Trojan.Gen.MBT
ESET-NOD32 MSIL/Agent.URK
Kaspersky HEUR:Trojan.MSIL.Agent.gen
Avast Win64:Malware-gen
Sophos Mal/Generic-S + Troj/MDrop-JJI
Zillya Trojan.Crypt.Win32.60233
TrendMicro Trojan.Win64.XLADD.A
McAfee-GW-Edition RDN/GenericU
Ikarus Trojan-Spy.Vidar
Jiangmin Trojan.MSIL.aeqed
Webroot W32.Adware.Gen
Kingsoft Win32.Troj.Undef.(kcloud)
Gridinsoft Trojan.Win64.Agent.oa
Microsoft Trojan:Win32/Casdet!rfn
ZoneAlarm HEUR:Trojan.MSIL.Agent.gen
GData Win64.Trojan.Agent.PYXGR2
AhnLab-V3 Trojan/Win.MSIL.C4576487
ALYac Trojan.PSW.Vidar
VBA32 Trojan.MSIL.Agent
TrendMicro-HouseCall Trojan.Win64.XLADD.A
Yandex Trojan.DOTHETUK!59xMQMvn7qc
Fortinet W32/Agent!tr
AVG Win64:Malware-gen
Panda Trj/Agent.DLL
Qihoo-360 Win64/Trojan.Generic.HggASZkA