popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

vbc.exe

Malicious Library UPX PE32 PE File
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6402 Oct. 15, 2021, 9:37 a.m. Oct. 15, 2021, 9:46 a.m.
Size 794.5KB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 09a2d9ea4a18f01aff698b8cfc98a87e
SHA256 99cdf3421923232c160c5075af3bf8620df65bd59cf99cc341f17a58e1eeb4f2
CRC32 5E329C8B
ssdeep 12288:ZV17shYPLAsHSU8Qrn47tremr8bP/xz4Hrh+MBtI+BfZ8fQO:ZfwYxHSyMreg0P94HdtBZ8I
Yara
  • PE_Header_Zero - PE File Signature
  • UPX_Zero - UPX packed file
  • IsPE32 - (no description)
  • Malicious_Library_Zero - Malicious_Library

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
172.67.188.154 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section CODE
section DATA
section BSS
packer BobSoft Mini Delphi -> BoB / BobSoft
host 172.67.188.154
Elastic malicious (high confidence)
Sangfor Trojan.Win32.Save.a
BitDefenderTheta Gen:NN.ZelphiCO.34214.XGW@aGcUbUpi
Cyren W32/Injector.AMR.gen!Eldorado
ESET-NOD32 a variant of Win32/Injector.EQAC
APEX Malicious
Ikarus Trojan.Win32.Injector
eGambit Unsafe.AI_Score_84%
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Cynet Malicious (score: 100)
VBA32 BScope.TrojanSpy.Noon
Malwarebytes Malware.AI.573117890
SentinelOne Static AI - Suspicious PE
Fortinet W32/Injector.EQAC!tr