popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

0001.xll

Generic Malware Malicious Library UPX PE File DLL OS Processor Check PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us Oct. 28, 2021, 10:23 a.m. Oct. 28, 2021, 10:23 a.m.
Size 637.0KB
Type PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5 be014ff519969d32929b19cd3be0c0d1
SHA256 91d0e6bfeef38db996b0fbe3d1fdfc10826842a10c896646f5044c892b2c1665
CRC32 ECFDA7EA
ssdeep 12288:70Ws7IMtR4yVld8bzbBSreFhgFK/UqWv:70bdkX1LcL
PDB Path C:\Work\Excel-DNA\ExcelDna\Source\ExcelDna\Release\ExcelDna.pdb
Yara
  • PE_Header_Zero - PE File Signature
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check
  • IsPE32 - (no description)
  • IsDLL - (no description)
  • Malicious_Library_Zero - Malicious_Library
  • UPX_Zero - UPX packed file

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path C:\Work\Excel-DNA\ExcelDna\Source\ExcelDna\Release\ExcelDna.pdb
section .gfids
resource name ASSEMBLY
resource name ASSEMBLY_LZMA
resource name DNA
section {u'size_of_data': u'0x0002ba00', u'virtual_address': u'0x0007b000', u'entropy': 6.965243315332196, u'name': u'.rsrc', u'virtual_size': u'0x0002b8c4'} entropy 6.96524331533 description A section with a high entropy has been found
entropy 0.274371069182 description Overall entropy of this PE file is high
MicroWorld-eScan Trojan.GenericKD.37824870
FireEye Trojan.GenericKD.37824870
McAfee RDN/GenericS
Sangfor Trojan.Win32.Wacatac.B
Alibaba TrojanDownloader:Win32/Tnega.b51cf2db
K7GW Riskware ( 00584baa1 )
K7AntiVirus Riskware ( 00584baa1 )
Cyren W32/Agent.DND.gen!Eldorado
Symantec ML.Attribute.HighConfidence
Paloalto generic.ml
Kaspersky Trojan-Downloader.Win32.Agent.xxztee
BitDefender Trojan.GenericKD.37824870
Avast Win32:Trojan-gen
Tencent Win32.Trojan-downloader.Agent.Pfsr
Ad-Aware Trojan.GenericKD.37824870
Emsisoft Trojan.GenericKD.37824870 (B)
TrendMicro TROJ_GEN.R03BC0DJM21
McAfee-GW-Edition RDN/GenericS
Sophos Mal/Generic-S
Ikarus Win32.Outbreak
Jiangmin Trojan.MSIL.ajhkd
Avira TR/Redcap.ryznd
Antiy-AVL Trojan/Generic.ASMalwS.2D610A6
Gridinsoft Trojan.Win32.Gen.vb!s1
Microsoft Trojan:Win32/Tnega.R!MTB
GData Trojan.GenericKD.37824870
Cynet Malicious (score: 99)
AhnLab-V3 Trojan/Win.Frs.R446106
ALYac Trojan.GenericKD.37824870
MAX malware (ai score=82)
Malwarebytes Trojan.Downloader
Zoner Trojan.Win32.120941
TrendMicro-HouseCall TROJ_GEN.R03BC0DJM21
Yandex Trojan.Agent!g5X2fRf70S8
Fortinet W32/GenericKD.47152171!tr
AVG Win32:Trojan-gen
Panda Trj/CI.A
MaxSecure Trojan.Malware.127039568.susgen