popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

t.php

UPX OS Processor Check PE64 PE File DLL
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us Aug. 31, 2023, 10:42 a.m. Aug. 31, 2023, 10:43 a.m.
Size 638.5KB
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 10a6d12af72886e825179217de2ed3a5
SHA256 a508747a5c0be6389b82c5b9ab223179ca9c1ab921043191887356d33a38db95
CRC32 1BFE58AB
ssdeep 12288:BqlI8nyOrk/09drnix9Lo/k9crJmEcUKx12UAXXWRf9:BmyOrkM9lk9Lo/k9crJmEcUKx1252J9
PDB Path C:\buildP\pcre2-10.39-x64\pcre2-8.pdb
Yara
  • OS_Processor_Check_Zero - OS Processor Check
  • UPX_Zero - UPX packed file
  • IsDLL - (no description)
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path C:\buildP\pcre2-10.39-x64\pcre2-8.pdb
section .00cfg
section {u'size_of_data': u'0x00005000', u'virtual_address': u'0x0009e000', u'entropy': 7.205461522019828, u'name': u'.reloc', u'virtual_size': u'0x000045ae'} entropy 7.20546152202 description A section with a high entropy has been found