popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

t.php

UPX OS Processor Check PE64 PE File DLL
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Aug. 31, 2023, 10:42 a.m. Aug. 31, 2023, 10:42 a.m.
Size 638.5KB
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 ce212477efea0109d5fe886a6396f4b4
SHA256 27c9055e8f0011a74da6128f2b2f8a5e596d5647f046488b5c78a42d24ed488a
CRC32 162F3F4B
ssdeep 12288:BqlI8nyOrk/09drnix9Lo/k9crJmEcUKx12UAXXWRfH:BmyOrkM9lk9Lo/k9crJmEcUKx1252JH
PDB Path C:\buildP\pcre2-10.39-x64\pcre2-8.pdb
Yara
  • OS_Processor_Check_Zero - OS Processor Check
  • UPX_Zero - UPX packed file
  • IsDLL - (no description)
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path C:\buildP\pcre2-10.39-x64\pcre2-8.pdb
section .00cfg
section {u'size_of_data': u'0x00005000', u'virtual_address': u'0x0009e000', u'entropy': 7.205214963371229, u'name': u'.reloc', u'virtual_size': u'0x000045ae'} entropy 7.20521496337 description A section with a high entropy has been found