Summary | ZeroBOX

okka25.exe

Malicious Packer UPX Malicious Library PE64 PE File
Category Machine Started Completed
FILE s1_win7_x6401 Aug. 21, 2023, 9:53 a.m. Aug. 21, 2023, 9:55 a.m.
Size 860.0KB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 9a3d39a36e8da1542ed79190e778b587
SHA256 81b5941968b524ce0c043f6a431d362ae347d9c25e7b1b1fde151241abd68056
CRC32 24EA2F3E
ssdeep 12288:uqGetS/ITJqrraq/t2qny6xdRhMAK4vcmPEl0Io:auS/UEn/tUIMGPEl0I
PDB Path dccw.pdb
Yara
  • Malicious_Library_Zero - Malicious_Library
  • UPX_Zero - UPX packed file
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
  • Malicious_Packer_Zero - Malicious Packer

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path dccw.pdb
resource name MUI
resource name WEVT_TEMPLATE
resource name None
Time & API Arguments Status Return Repeated

__exception__

stacktrace:
okka25+0xa3ba @ 0xff17a3ba

exception.instruction_r: 8a 01 3a 04 0a 75 2c 48 ff c1 49 ff c8 f6 c1 07
exception.symbol: okka25+0xa3ba
exception.instruction: mov al, byte ptr [rcx]
exception.module: okka25.exe
exception.exception_code: 0xc0000005
exception.offset: 41914
exception.address: 0xff17a3ba
registers.r14: 6129487643401535625
registers.r15: 0
registers.rcx: 8793746773546
registers.rsi: 0
registers.r10: 0
registers.rbx: 1992451373
registers.rsp: 2031144
registers.r11: -233044887638957
registers.r8: 22
registers.r9: 0
registers.rdx: -8793744742442
registers.r12: 0
registers.rbp: 0
registers.rdi: 0
registers.rax: 8791752900608
registers.r13: 53792372971350
1 0 0
Elastic malicious (high confidence)
Malwarebytes Neshta.Virus.FileInfector.DDS
VirIT Trojan.Win64.Agent.BBZ
tehtris Generic.Malware
ESET-NOD32 a variant of Win64/GenKryptik.GMHM
AhnLab-V3 Trojan/Win.Generic.C5462096
APEX Malicious
section {u'size_of_data': u'0x000bea00', u'virtual_address': u'0x00019000', u'entropy': 7.461938587572878, u'name': u'.rsrc', u'virtual_size': u'0x000bf000'} entropy 7.46193858757 description A section with a high entropy has been found
entropy 0.887660069849 description Overall entropy of this PE file is high