popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

yes.exe

PE64 PE File
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us Oct. 20, 2023, 7:27 a.m. Oct. 20, 2023, 7:31 a.m.
Size 3.4MB
Type PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
MD5 355e758c66e73f61dbaaeb7174f74de0
SHA256 12bac7c5ff97dec030964d932091a946ce36cbfdae47030f387838da9d6e08db
CRC32 CD376231
ssdeep 98304:o1s/4jpy2gmxkKe53H1UczNjj/Gm6XQahEb3OsPTyPw7O6c/7cB15XXX0UXE:EpyYw1U29jWLYOsPTAw7Of/7cpXtE
Yara
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section {u'size_of_data': u'0x0036f600', u'virtual_address': u'0x001d5000', u'entropy': 7.691227061198989, u'name': u'UPX1', u'virtual_size': u'0x00370000'} entropy 7.6912270612 description A section with a high entropy has been found
entropy 0.99957374254 description Overall entropy of this PE file is high
section UPX0 description Section name indicates UPX
section UPX1 description Section name indicates UPX