popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

nigga.exe

PE32 PE File
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 March 8, 2023, 11:05 a.m. March 8, 2023, 11:18 a.m.
Size 694.5KB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 01d648ecf27b3e9a6415af8fab167ac9
SHA256 70ebead6ea8cac65cb1fccb593f7751c6f9ca56333a828d7ce1f9b5c4e23f47a
CRC32 E91B2E15
ssdeep 12288:19HFJI/fb/r6WEc0YqxK72b3VrX05jtPXqRTLn57I:19H/I/fbuWEc0VxKSb9XMtqNLn5
Yara
  • IsPE32 - (no description)
  • PE_Header_Zero - PE File Signature

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

__exception__

 stacktrace: 

        
      
      
      

    
  
    
      
        exception.symbol:
        
        

      
        exception.exception_code:
        0xc0000005
        

      
        exception.address:
        0x0
        

      
    
  
    
      
        registers.esp:
        1631020
        

      
        registers.edi:
        1984134288
        

      
        registers.eax:
        4294967295
        

      
        registers.ebp:
        1631116
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        0
        

      
        registers.esi:
        1984308557
        

      
        registers.ecx:
        87
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                    


                    

                

            
            
        
            


                

                
                

                    

                    

                        
                        

                            

                                

                                    

                                    
                                        

                                            Time & API
                                            Arguments
                                            Status
                                            Return
                                            Repeated
                                        

                                    

                                

                                

                                    

  
NtAllocateVirtualMemory

  
  
    
      
    
  


  
    
      process_identifier:
      
        
          2552
        
      
      
      

    
  
    
      region_size:
      
        
          1597440
        
      
      
      

    
  
    
      stack_dep_bypass:
      
        
          0
        
      
      
      

    
  
    
      stack_pivoted:
      
        
          0
        
      
      
      

    
  
    
      heap_dep_bypass:
      
        
          0
        
      
      
      

    
  
    
      protection:
      
        
          64
        
      
      
        (PAGE_EXECUTE_READWRITE)
      
      

    
  
    
      base_address:
      
        
          0x004c0000
        
      
      
      

    
  
    
      allocation_type:
      
        
          8192
        
      
      
        (MEM_RESERVE)
      
      

    
  
    
      process_handle:
      
        
          0xffffffff
        
      
      
      

    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
NtAllocateVirtualMemory

  
  
    
      
    
  


  
    
      process_identifier:
      
        
          2552
        
      
      
      

    
  
    
      region_size:
      
        
          90112
        
      
      
      

    
  
    
      stack_dep_bypass:
      
        
          0
        
      
      
      

    
  
    
      stack_pivoted:
      
        
          0
        
      
      
      

    
  
    
      heap_dep_bypass:
      
        
          1
        
      
      
      

    
  
    
      protection:
      
        
          64
        
      
      
        (PAGE_EXECUTE_READWRITE)
      
      

    
  
    
      base_address:
      
        
          0x00630000
        
      
      
      

    
  
    
      allocation_type:
      
        
          4096
        
      
      
        (MEM_COMMIT)
      
      

    
  
    
      process_handle:
      
        
          0xffffffff
        
      
      
      

    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
NtProtectVirtualMemory

  
  
    
      
    
  


  
    
      process_identifier:
      
        
          2552
        
      
      
      

    
  
    
      stack_dep_bypass:
      
        
          0
        
      
      
      

    
  
    
      stack_pivoted:
      
        
          0
        
      
      
      

    
  
    
      heap_dep_bypass:
      
        
          0
        
      
      
      

    
  
    
      length:
      
        
          143360
        
      
      
      

    
  
    
      protection:
      
        
          64
        
      
      
        (PAGE_EXECUTE_READWRITE)
      
      

    
  
    
      base_address:
      
        
          0x00400000
        
      
      
      

    
  
    
      process_handle:
      
        
          0xffffffff
        
      
      
      

    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                    


                    

                

            
            
        
            


                

                
                

                    

                    

                        
                        

                            

                                

                                    Lionic
                                    Trojan.Win32.Generic.4!c
                                    
                                


                            

                        

                            

                                

                                    MicroWorld-eScan
                                    Gen:Variant.Jaik.127154
                                    
                                


                            

                        

                            

                                

                                    ALYac
                                    Gen:Variant.Jaik.127154
                                    
                                


                            

                        

                            

                                

                                    VIPRE
                                    Gen:Variant.Jaik.127154
                                    
                                


                            

                        

                            

                                

                                    Alibaba
                                    Trojan:Win32/GenKryptik.9051f230
                                    
                                


                            

                        

                            

                                

                                    CrowdStrike
                                    win/malicious_confidence_100% (W)
                                    
                                


                            

                        

                            

                                

                                    Arcabit
                                    Trojan.Jaik.D1F0B2
                                    
                                


                            

                        

                            

                                

                                    Symantec
                                    ML.Attribute.HighConfidence
                                    
                                


                            

                        

                            

                                

                                    Elastic
                                    malicious (high confidence)
                                    
                                


                            

                        

                            

                                

                                    ESET-NOD32
                                    a variant of Win32/GenKryptik.GGOH
                                    
                                


                            

                        

                            

                                

                                    Cynet
                                    Malicious (score: 100)
                                    
                                


                            

                        

                            

                                

                                    APEX
                                    Malicious
                                    
                                


                            

                        

                            

                                

                                    Paloalto
                                    generic.ml
                                    
                                


                            

                        

                            

                                

                                    Kaspersky
                                    UDS:DangerousObject.Multi.Generic
                                    
                                


                            

                        

                            

                                

                                    BitDefender
                                    Gen:Variant.Jaik.127154
                                    
                                


                            

                        

                            

                                

                                    Avast
                                    FileRepMalware [Misc]
                                    
                                


                            

                        

                            

                                

                                    Tencent
                                    Win32.Trojan.Generic.Iqil
                                    
                                


                            

                        

                            

                                

                                    Sophos
                                    ML/PE-A
                                    
                                


                            

                        

                            

                                

                                    McAfee-GW-Edition
                                    Artemis!Trojan
                                    
                                


                            

                        

                            

                                

                                    FireEye
                                    Generic.mg.01d648ecf27b3e9a
                                    
                                


                            

                        

                            

                                

                                    Emsisoft
                                    Gen:Variant.Jaik.127154 (B)
                                    
                                


                            

                        

                            

                                

                                    Ikarus
                                    Trojan.Win32.Crypt
                                    
                                


                            

                        

                            

                                

                                    Avira
                                    TR/Crypt.XPACK.Gen
                                    
                                


                            

                        

                            

                                

                                    Microsoft
                                    Trojan:Win32/Casdet!rfn
                                    
                                


                            

                        

                            

                                

                                    ZoneAlarm
                                    UDS:DangerousObject.Multi.Generic
                                    
                                


                            

                        

                            

                                

                                    GData
                                    Gen:Variant.Jaik.127154
                                    
                                


                            

                        

                            

                                

                                    Google
                                    Detected
                                    
                                


                            

                        

                            

                                

                                    McAfee
                                    Artemis!01D648ECF27B
                                    
                                


                            

                        

                            

                                

                                    MAX
                                    malware (ai score=86)
                                    
                                


                            

                        

                            

                                

                                    VBA32
                                    BScope.TrojanSpy.Zbot
                                    
                                


                            

                        

                            

                                

                                    Cylance
                                    unsafe
                                    
                                


                            

                        

                            

                                

                                    Rising
                                    Malware.Undefined!8.C (TFE:5:cXDm1r1m2sI)
                                    
                                


                            

                        

                            

                                

                                    Yandex
                                    Trojan.GenAsa!SyceT1P2laA
                                    
                                


                            

                        

                            

                                

                                    SentinelOne
                                    Static AI - Suspicious PE
                                    
                                


                            

                        

                            

                                

                                    Fortinet
                                    W32/GenKryptik.GGOH!tr
                                    
                                


                            

                        

                            

                                

                                    BitDefenderTheta
                                    Gen:NN.ZexaF.36308.Rq0@aWsJZ9pi
                                    
                                


                            

                        

                            

                                

                                    AVG
                                    FileRepMalware [Misc]