popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

t.php.2.exe

UPX OS Processor Check PE64 PE File DLL
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Aug. 31, 2023, 11:23 a.m. Aug. 31, 2023, 11:23 a.m.
Size 638.5KB
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 e5854c758473d847a7e9ba63e0e3f88d
SHA256 e647f56f8970df428f07c5fdb6747571fffe66602aa4dd02edd7619bb7d93d6a
CRC32 4B1183AA
ssdeep 12288:BqlI8nyOrk/09drnix9Lo/k9crJmEcUKx12UAXXWRf4:BmyOrkM9lk9Lo/k9crJmEcUKx1252J4
PDB Path C:\buildP\pcre2-10.39-x64\pcre2-8.pdb
Yara
  • OS_Processor_Check_Zero - OS Processor Check
  • UPX_Zero - UPX packed file
  • IsDLL - (no description)
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path C:\buildP\pcre2-10.39-x64\pcre2-8.pdb
section .00cfg
section {u'size_of_data': u'0x00005000', u'virtual_address': u'0x0009e000', u'entropy': 7.205328690133651, u'name': u'.reloc', u'virtual_size': u'0x000045ae'} entropy 7.20532869013 description A section with a high entropy has been found