popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Unpaid month.xll

Generic Malware Malicious Library UPX PE File DLL OS Processor Check PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us Nov. 2, 2021, 2:37 p.m. Nov. 2, 2021, 2:39 p.m.
Size 637.0KB
Type PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5 aa0bd807de12aa711ec1b6fb34212a10
SHA256 0bc59f697a9de5c77c39318361b288e6489c4e0edfc966acfe418bfb22bdc99e
CRC32 E4E475A4
ssdeep 12288:D0Ws7IMtR4yVld8bzbBSreXhgFK/UqWp:D0bdkX1VcL
PDB Path C:\Work\Excel-DNA\ExcelDna\Source\ExcelDna\Release\ExcelDna.pdb
Yara
  • PE_Header_Zero - PE File Signature
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check
  • IsPE32 - (no description)
  • IsDLL - (no description)
  • Malicious_Library_Zero - Malicious_Library
  • UPX_Zero - UPX packed file

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path C:\Work\Excel-DNA\ExcelDna\Source\ExcelDna\Release\ExcelDna.pdb
section .gfids
resource name ASSEMBLY
resource name ASSEMBLY_LZMA
resource name DNA
section {u'size_of_data': u'0x0002ba00', u'virtual_address': u'0x0007b000', u'entropy': 6.965270090477251, u'name': u'.rsrc', u'virtual_size': u'0x0002b920'} entropy 6.96527009048 description A section with a high entropy has been found
entropy 0.274371069182 description Overall entropy of this PE file is high
Cyren W32/Agent.DND.gen!Eldorado
Avast Win32:Malware-gen
Jiangmin Trojan.MSIL.ajhkd
Antiy-AVL Trojan/Generic.ASMalwS.2D610A6
Gridinsoft Trojan.Win32.Gen.vb!s1
Microsoft Trojan:Win32/Wacatac.B!ml
Cynet Malicious (score: 100)
Malwarebytes Trojan.Downloader
Zoner Trojan.Win32.120941
Yandex Trojan.Agent!g5X2fRf70S8
AVG Win32:Malware-gen