popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

cmd.10001.exe

Malicious Packer UPX PE64 PE File
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us April 1, 2024, 7:36 a.m. April 1, 2024, 7:41 a.m.
Size 1.4MB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 ce8e1592a4685f349136cb13c12e543f
SHA256 40516869f63341f2c9a760ac0faa823a11168fdc0067beef413cd6ed9e858f07
CRC32 E209BDD0
ssdeep 24576:yse92KNwXkWxZiwdMeHRmXKNjhdAT2JSzrSQb92Jco0a:E2K8eexmyj/nCmwo0a
Yara
  • IsPE64 - (no description)
  • PE_Header_Zero - PE File Signature
  • Malicious_Packer_Zero - Malicious Packer
  • UPX_Zero - UPX packed file

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section .symtab
section {u'size_of_data': u'0x00018200', u'virtual_address': u'0x0017d000', u'entropy': 7.991339885948009, u'name': u'/19', u'virtual_size': u'0x0001809d'} entropy 7.99133988595 description A section with a high entropy has been found
section {u'size_of_data': u'0x00004e00', u'virtual_address': u'0x00196000', u'entropy': 7.906069407068587, u'name': u'/32', u'virtual_size': u'0x00004ce4'} entropy 7.90606940707 description A section with a high entropy has been found
section {u'size_of_data': u'0x00030600', u'virtual_address': u'0x0019c000', u'entropy': 7.99569977195316, u'name': u'/65', u'virtual_size': u'0x0003050f'} entropy 7.99569977195 description A section with a high entropy has been found
section {u'size_of_data': u'0x00015200', u'virtual_address': u'0x001cd000', u'entropy': 7.981442449406277, u'name': u'/78', u'virtual_size': u'0x000150ad'} entropy 7.98144244941 description A section with a high entropy has been found
section {u'size_of_data': u'0x00008c00', u'virtual_address': u'0x001e3000', u'entropy': 7.783783276254533, u'name': u'/90', u'virtual_size': u'0x00008a1a'} entropy 7.78378327625 description A section with a high entropy has been found
entropy 0.293132900581 description Overall entropy of this PE file is high