popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis
NSIS Malicious Library UPX PE32 PE File
  1. Resubmit sample
Category Machine Started Completed
ARCHIVE s1_win7_x6402 July 25, 2023, 7:37 p.m. July 25, 2023, 7:37 p.m.

Archive DOC7756184861Ͱ.exe @ DOC7756184861-1.zip

Summary

Size 97.0MB
Type PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
MD5 438c0cf9055cd5cec88f31deef18911e
SHA1 49266fc27f7ef5391e805c67aff2e8a91d978c55
SHA256 2ed6707e04cb3369e176a6a331457d8330683dfc60d2199f80da68dbe63a9de2
SHA512
dd0adc71e5b2e9801d37512e09e82938899aa38a0781d28d9678a34b251a26e9aa0f9377a186f154e2960dc6218985af33be7a8bd635293f71e512530765fa30
CRC32 AED3874C
ssdeep 3145728:6HkPq7rvekj2SppnU2OKwEL5jhOgoJ4rGq1:ID7Jj2SppUGl
Yara
  • UPX_Zero - UPX packed file
  • NSIS_Installer - Null Soft Installer
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section .ndata