popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Over Charges.xll

Generic Malware Malicious Library UPX PE64 PE File DLL OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us Nov. 2, 2021, 2:37 p.m. Nov. 2, 2021, 2:39 p.m.
Size 553.5KB
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 b80ab428dca46779c14807ea7422452f
SHA256 75673c98de0bc2888304d04b5357087612c6762a2563b76cbd83bbcfac0833be
CRC32 7AA989E2
ssdeep 12288:Vn/zDvGHAykHSzLW/4+8bzbBSreMdchgFK/UqW:ZzbGHAzHAjX1TcL
PDB Path C:\Work\Excel-DNA\ExcelDna\Source\ExcelDna\Release64\ExcelDna64.pdb
Yara
  • IsPE64 - (no description)
  • PE_Header_Zero - PE File Signature
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check
  • IsDLL - (no description)
  • Malicious_Library_Zero - Malicious_Library
  • UPX_Zero - UPX packed file

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path C:\Work\Excel-DNA\ExcelDna\Source\ExcelDna\Release64\ExcelDna64.pdb
section .gfids
resource name ASSEMBLY
resource name ASSEMBLY_LZMA
resource name DNA
section {u'size_of_data': u'0x0002ba00', u'virtual_address': u'0x00077000', u'entropy': 6.96529895450764, u'name': u'.rsrc', u'virtual_size': u'0x0002b920'} entropy 6.96529895451 description A section with a high entropy has been found
entropy 0.315837104072 description Overall entropy of this PE file is high