popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

instd.exe

Malicious Packer Malicious Library PE32 PE File
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us Nov. 1, 2021, 5:58 p.m. Nov. 1, 2021, 5:58 p.m.
Size 215.0KB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 eea1c3d1ab9dd50b3dae826b35c8b138
SHA256 7e148999439b83e74d823e98f7a82e4bd75d5e259e4c6351aabbb446eb9dfcc8
CRC32 5C48788E
ssdeep 6144:lRqUj7H4qyEcBDcUGi9ghYW2bGj9Gz+NpYg5iYI5Lw6/30iEtE/6uz6HgNQHJxWU:lRq47H/tcBDcUG6ghSW9GiNpYJYI5U6M
Yara
  • Malicious_Packer_Zero - Malicious Packer
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • Malicious_Library_Zero - Malicious_Library

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

packer Armadillo v1.71
section {u'size_of_data': u'0x00007000', u'virtual_address': u'0x00031000', u'entropy': 7.475501102117054, u'name': u'.rsrc', u'virtual_size': u'0x00006e9e'} entropy 7.47550110212 description A section with a high entropy has been found
Bkav W32.AIDetect.malware1
Lionic Trojan.Win32.Malicious.4!c
Elastic malicious (high confidence)
Cynet Malicious (score: 100)
ALYac Gen:Heur.ZOF.2
Cylance Unsafe
Sangfor Trojan.Win32.Save.a
K7AntiVirus Riskware ( 00584baa1 )
K7GW Riskware ( 00584baa1 )
Cybereason malicious.1ab9dd
Arcabit Trojan.ZOF.2
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Generik.HOTRTHM
APEX Malicious
Paloalto generic.ml
Kaspersky HEUR:Trojan.Win32.Zenpak.gen
BitDefender Gen:Heur.ZOF.2
MicroWorld-eScan Gen:Heur.ZOF.2
Avast Win32:Malware-gen
Ad-Aware Gen:Heur.ZOF.2
Sophos Mal/Generic-S
Comodo .UnclassifiedMalware@0
McAfee-GW-Edition BehavesLike.Win32.Upatre.dm
FireEye Generic.mg.eea1c3d1ab9dd50b
Emsisoft Gen:Heur.ZOF.2 (B)
Ikarus Trojan.SuspectCRC
Avira TR/Dropper.Gen
Kingsoft Win32.Troj.Undef.(kcloud)
Gridinsoft Ransom.Win32.Sabsik.vb
Microsoft Trojan:Win32/Sabsik.FL.B!ml
ZoneAlarm HEUR:Trojan.Win32.Zenpak.gen
GData Gen:Heur.ZOF.2
McAfee Artemis!EEA1C3D1AB9D
MAX malware (ai score=100)
VBA32 BScope.TrojanSpy.Mufila
Malwarebytes MachineLearning/Anomalous.95%
TrendMicro-HouseCall TROJ_GEN.R002H07JU21
Rising Trojan.Generic@ML.89 (RDMK:5Mo5Q4NVKDVk0zFMidBEzQ)
Yandex Trojan.Zenpak!ns9gDCep0oM
SentinelOne Static AI - Malicious PE
eGambit Unsafe.AI_Score_80%
Fortinet W32/PossibleThreat
BitDefenderTheta AI:Packer.87110F6C1F
AVG Win32:Malware-gen
Panda Trj/CI.A
CrowdStrike win/malicious_confidence_70% (W)