popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

ss25.exe

Gen1 UPX Malicious Library Malicious Packer PE64 PE File
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 March 8, 2023, 11:02 a.m. March 8, 2023, 11:09 a.m.
Size 212.5KB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 48f4f6461f03606000016cee556bab4f
SHA256 b840bd433a47d42c5ff7e6ef94c39b1309849398e7d4a51938fdcfacfa26b793
CRC32 D6C259AA
ssdeep 3072:xVFE/ZYueQ6059PKEywh8QzEfae1NJLgf7nDVF6PUp1Yo3ICgC:MYue05FhyI8wEHN5gfzDVlVXg
PDB Path notepad.pdb
Yara
  • UPX_Zero - UPX packed file
  • Malicious_Library_Zero - Malicious_Library
  • Win32_Trojan_Gen_2_0904B0_Zero - Win32 Trojan Gen
  • Malicious_Packer_Zero - Malicious Packer
  • Win32_Trojan_Gen_1_0904B0_Zero - Win32 Trojan Emotet
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path notepad.pdb
resource name MUI
section {u'size_of_data': u'0x00019c00', u'virtual_address': u'0x0001f000', u'entropy': 7.370270431160758, u'name': u'.rsrc', u'virtual_size': u'0x00019af0'} entropy 7.37027043116 description A section with a high entropy has been found
entropy 0.486997635934 description Overall entropy of this PE file is high
Elastic malicious (moderate confidence)
BitDefender Trojan.GenericKD.65826955
APEX Malicious
Avast FileRepMalware [Misc]
Kaspersky UDS:DangerousObject.Multi.Generic
MicroWorld-eScan Trojan.GenericKD.65826955
Emsisoft Trojan.GenericKD.65826955 (B)
TrendMicro Trojan.Win64.PRIVATELOADER.YXDCGZ
McAfee-GW-Edition Artemis!Trojan
FireEye Trojan.GenericKD.65826955
GData Trojan.GenericKD.65826955
Microsoft Trojan:Win32/Casdet!rfn
McAfee Artemis!48F4F6461F03
MAX malware (ai score=81)
TrendMicro-HouseCall Trojan.Win64.PRIVATELOADER.YXDCGZ
AVG FileRepMalware [Misc]