popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

df656194809375ad60e61b7e05cf02ac.exe

Malicious Library UPX .NET DLL PE File DLL OS Processor Check PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Sept. 23, 2023, 7:47 p.m. Sept. 23, 2023, 7:47 p.m.
Size 3.3MB
Type PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 df656194809375ad60e61b7e05cf02ac
SHA256 af7ff27807ed682d295a674c21743f32c3767f8df9731743fde62f98f1795ad4
CRC32 3146E7BC
ssdeep 49152:FgfBlgn7gONwIM+/z8qGdI+Nk7xJ+H76xqq95fB+DuNaKpvuz4P0DgytrMtJ:ayM+78qGdxSJuY5+Vi280Dgqr
PDB Path Fiber.pdb
Yara
  • Malicious_Library_Zero - Malicious_Library
  • Is_DotNET_DLL - (no description)
  • UPX_Zero - UPX packed file
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE32 - (no description)
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path Fiber.pdb
Google Detected
Ikarus Trojan-Spy.Agent
DeepInstinct MALICIOUS
section {u'size_of_data': u'0x0034ce00', u'virtual_address': u'0x00002000', u'entropy': 7.410572247998962, u'name': u'.text', u'virtual_size': u'0x0034ccd4'} entropy 7.410572248 description A section with a high entropy has been found
entropy 0.999556344277 description Overall entropy of this PE file is high