popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

jk.dll

Malicious Library OS Processor Check CAB MSOffice File
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Sept. 22, 2023, 7:47 a.m. Sept. 22, 2023, 7:49 a.m.
Size 13.7MB
Type Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Default, Author: ScreenConnect Software, Keywords: Default, Comments: Default, Template: Intel;1033, Revision Number: {51983740-96CD-FB57-8B4E-C4DA0C2C121D}, Create Time/Date: Fri Sep 1 23:29:12 2023, Last Saved Time/Date: Fri Sep 1 23:29:12 2023, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.11.0.1701), Security: 2
MD5 61422a35afb21b453b824c22f44501ac
SHA256 02fe5666613f62c6e067b33f7194b2e1f9cf523cc47e25d0f82a8a001471f829
CRC32 A16F568B
ssdeep 196608:NkUKpnSrFjkUKpnRkUKpnjkUKpnukUKpnN:jMnSrMnvMnNMnkMnN
Yara
  • Malicious_Library_Zero - Malicious_Library
  • Microsoft_Office_File_Zero - Microsoft Office File
  • CAB_file_format - CAB archive file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Zillya Trojan.Stealer.Win32.37991