popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

t.php.exe

UPX OS Processor Check PE64 PE File DLL
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Aug. 31, 2023, 11:23 a.m. Aug. 31, 2023, 11:23 a.m.
Size 638.5KB
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 588bbac508cd620fae65c16a47b2fc1c
SHA256 41ef6cb071117b57f7f68c4f4f47baf3c1b2ecd20bac06b51ec6006d8034412e
CRC32 3A7460FF
ssdeep 12288:BqlI8nyOrk/09drnix9Lo/k9crJmEcUKx12UAXXWRfo:BmyOrkM9lk9Lo/k9crJmEcUKx1252Jo
PDB Path C:\buildP\pcre2-10.39-x64\pcre2-8.pdb
Yara
  • OS_Processor_Check_Zero - OS Processor Check
  • UPX_Zero - UPX packed file
  • IsDLL - (no description)
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path C:\buildP\pcre2-10.39-x64\pcre2-8.pdb
section .00cfg
section {u'size_of_data': u'0x00005000', u'virtual_address': u'0x0009e000', u'entropy': 7.205538257140731, u'name': u'.reloc', u'virtual_size': u'0x000045ae'} entropy 7.20553825714 description A section with a high entropy has been found