Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

Summary | ZeroBOX

cc1be3c6d243a4d8f90e87c84709d44fe442722f59d42b8f18d41f017958bcbc_2688-517c38c042288036.exe_

Gen1 Malicious Packer UPX PE32 PE File

Category	Machine	Started	Completed
FILE	s1_win7_x6401	April 2, 2023, 1:08 p.m.	April 2, 2023, 1:08 p.m.

Size	56.0KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`9fddc313ba5774bdc646aef46d2de313`
SHA256	`cc1be3c6d243a4d8f90e87c84709d44fe442722f59d42b8f18d41f017958bcbc`
CRC32	`4E5EE482`
ssdeep	`768:jDNXOLLFM1taXSRqbSEln5IyYpamDjobj8SpM:fNixM16SRqln5IUmDjoXV`
Yara	UPX_Zero - UPX packed file Win32_Trojan_Gen_1_0904B0_Zero - Win32 Trojan Emotet Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) PE_Header_Zero - PE File Signature

cc1be3c6d243a4d8f90e87c84709d44fe442722f59d42b8f18d41f017958bcbc_2688-517c38c042288036.exe_ "C:\Users\test22\AppData\Local\Temp\cc1be3c6d243a4d8f90e87c84709d44fe442722f59d42b8f18d41f017958bcbc_2688-517c38c042288036.exe_"
2572

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

The file contains an unknown PE resource name possibly indicative of a packer (1 event)

resource name

MUI

File has been identified by one AntiVirus engine on VirusTotal as malicious (1 event)

Trapmine

suspicious.low.ml.score