popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

unk.exe

UPX Malicious Library OS Processor Check PE64 PE File
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Nov. 14, 2023, 6:13 a.m. Nov. 14, 2023, 6:13 a.m.
Size 128.0KB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 ca42b110a0926f8aa00abd2500d520cb
SHA256 3db31868fb120145ea8358bd7c845c4d8d852e331c5597737ef5b838a2ba5493
CRC32 515DAEF0
ssdeep 3072:TjK7aZ9vY2ah04DeyjLi5XrprYP+SmPw66IiHC:TjKeZnaa4SyjWV1r8+PE5HC
PDB Path D:\a\_work\e\src\out\Release_x64\mini_installer.exe.pdb
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path D:\a\_work\e\src\out\Release_x64\mini_installer.exe.pdb
section .00cfg
section .retplne
resource name B7
resource name BL
section {u'size_of_data': u'0x0a6a0600', u'virtual_address': u'0x0000b000', u'entropy': 7.996161394291415, u'name': u'.rsrc', u'virtual_size': u'0x0a6a0554'} entropy 7.99616139429 description A section with a high entropy has been found
entropy 0.99984764271 description Overall entropy of this PE file is high