popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

TiWorker.exe

Gen1 Malicious Library UPX Malicious Packer PE File OS Processor Check PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Nov. 18, 2021, 11:02 p.m. Nov. 18, 2021, 11:03 p.m.
Size 250.3KB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 1f1b681628ea9d32e9d0888e9f233b3e
SHA256 674376f22cf3ce73db271190d5416fec40436dc25a39e4cac38a34ff0f273332
CRC32 20FB2FCE
ssdeep 3072:hjM2S8DOENnKKphw6s4RTQcWl4Ud24+6ahMd+kRSQSTrVJBWzZSPr6ZG0piTkfLX:hjM2S8q8nRccMNBa+dzMtKSPGZP/jX
PDB Path TiWorker.pdb
Yara
  • Malicious_Packer_Zero - Malicious Packer
  • PE_Header_Zero - PE File Signature
  • OS_Processor_Check_Zero - OS Processor Check
  • IsPE32 - (no description)
  • Win32_Trojan_Gen_2_0904B0_Zero - Win32 Trojan Gen
  • Malicious_Library_Zero - Malicious_Library
  • UPX_Zero - UPX packed file
  • Win32_Trojan_Gen_1_0904B0_Zero - Win32 Trojan Emotet

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path TiWorker.pdb
resource name MUI