popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

vbsss.jpg.exe

Generic Malware Antivirus .NET DLL PE File DLL PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Nov. 28, 2023, 11:26 a.m. Nov. 28, 2023, 11:28 a.m.
Size 15.0KB
Type PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 db2ee1ea937d2e49bc3f237edde48cfb
SHA256 c8d85f3257d9c4f8d407bbff7677285aea9264cf2f958edd077f097093041c97
CRC32 9BC89460
ssdeep 192:PyvHLKZeWY7t2KC+cdYmgMiQE8Qrrx/iuh+bzgstX2uTVVuJUoWZ0MP:CObHHURwuh+bzgRurUo
Yara
  • IsPE32 - (no description)
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
  • Is_DotNET_DLL - (no description)

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

GlobalMemoryStatusEx

 1 1 0
Time & API Arguments Status Return Repeated

NtProtectVirtualMemory

 process_identifier: 2564
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x72b52000
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 2564
region_size: 1441792
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03d70000
allocation_type: 8192 (MEM_RESERVE)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 2564
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03e90000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0
Elastic malicious (high confidence)
Malwarebytes Trojan.Downloader.MSIL.Generic
CrowdStrike win/malicious_confidence_100% (D)
ESET-NOD32 a variant of MSIL/TrojanDownloader.Agent.PIX
ClamAV Win.Trojan.Bladbindi-1
Avast MSIL:GenMalicious-CQL [Trj]
DrWeb Trojan.DownLoaderNET.842
SentinelOne Static AI - Malicious PE
Microsoft Trojan:Win32/Wacatac.B!ml
Google Detected
AhnLab-V3 Malware/Win32.RL_Generic.C3754190
Fortinet MSIL/Injector.UWS!tr
AVG MSIL:GenMalicious-CQL [Trj]
DeepInstinct MALICIOUS