| Category | Machine | Started | Completed |
|---|---|---|---|
| ARCHIVE | s1_win7_x6402 | Oct. 13, 2023, 1 a.m. | Oct. 13, 2023, 1 a.m. |
Archive LBB_pass.exe @ LBB_AEV-iledefrance.fr_05A8F2993F873622_12.08.23_aev_iledefrance.zip
Summary
| Size | 155.5KB |
|---|---|
| Type | PE32 executable (GUI) Intel 80386, for MS Windows |
| MD5 | a7edf0c15f22c442ab77d767eb98f112 |
| SHA1 | a25c0659401d23622b7f1394ba3f731a69a40423 |
| SHA256 | 58d5cb459211801df205b0258cc9d5341ba05e5d4b7753533a459c2fbeb80d8e |
| SHA512 |
c9fcf36cf71e01bea915bc071794b2050836088abb3c3cb159ade56f28b1b6935724f3c73150cf9eadf7ca388beb290fe0e5a83ab7c786179037ff67725133a7
|
| CRC32 | FC272A25 |
| ssdeep | 3072:cG2ptKVlL3aTMN/GhSRdSrok9D0prR51rITOKRA3pH040+ygpcTty9e:cGasCK/GkRdSro6A3LInSpH0n0pcByw |
| Yara |
|
-
LBB_pass.exe "C:\Users\test22\AppData\Local\Temp\LBB_pass.exe"
3008
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
| IP Address | Status | Action |
|---|---|---|
| 164.124.101.2 | Active | Moloch |
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
| section | .itext |
| section | {u'size_of_data': u'0x00017e00', u'virtual_address': u'0x00001000', u'entropy': 7.997923885947474, u'name': u'.text', u'virtual_size': u'0x00017de6'} | entropy | 7.99792388595 | description | A section with a high entropy has been found | |||||||||
| section | {u'size_of_data': u'0x0000a000', u'virtual_address': u'0x0001b000', u'entropy': 7.9958878165604155, u'name': u'.data', u'virtual_size': u'0x0000adc0'} | entropy | 7.99588781656 | description | A section with a high entropy has been found | |||||||||
| section | {u'size_of_data': u'0x00004000', u'virtual_address': u'0x00026000', u'entropy': 7.987507028528058, u'name': u'.pdata', u'virtual_size': u'0x00003e6e'} | entropy | 7.98750702853 | description | A section with a high entropy has been found | |||||||||
| entropy | 0.980582524272 | description | Overall entropy of this PE file is high | |||||||||||