Summary | ZeroBOX

asdsada.exe

Malicious Library UPX OS Processor Check PE32 PE File
Category Machine Started Completed
FILE s1_win7_x6402 April 11, 2023, 9:40 a.m. April 11, 2023, 9:43 a.m.
Size 82.2KB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 cbbdef6c4d82eb4ff01ed43f1e641907
SHA256 37a5d7960b09d3f0ec4c8d39203ce285a9ced3c70c3e3fbd5c6f3f21678bdec4
CRC32 8E85BECD
ssdeep 1536:qce5tx7pMyapco9fGaIZ0rViEddJo9YLndeB5SvE6LSvaNIsWWcdv+mh1FB3x3hC:qLx7my0cA1IZxMJo9YLnUBoLSCov+mhM
PDB Path C:\JobRelease\tools\msix-psf\Win32\Release\PsfRunDll32.pdb
Yara
  • UPX_Zero - UPX packed file
  • Malicious_Library_Zero - Malicious_Library
  • OS_Processor_Check_Zero - OS Processor Check
  • IsPE32 - (no description)
  • PE_Header_Zero - PE File Signature

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path C:\JobRelease\tools\msix-psf\Win32\Release\PsfRunDll32.pdb