popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

4eb90e57-1994-4a10-8168-48a8fb779cc6

Gen1 Generic Malware Malicious Library UPX PE File OS Processor Check PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us April 5, 2024, 11:41 p.m. April 5, 2024, 11:41 p.m.
Size 1.1MB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 6e6f8bc0dbceec859f9baaff0ebe2811
SHA256 7574d2c9903d02681c8190816aa30a76d8874f03148539eacd6af126dc4cba8e
CRC32 FD98DAF6
ssdeep 24576:U2G/nvxW3Ww0tkqV9bjWrJeQfBmAL6PLRr0UeJ:UbA30kqIJR/
PDB Path D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • Win32_Trojan_Gen_1_0904B0_Zero - Win32 Trojan Emotet
  • UPX_Zero - UPX packed file
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb
section .didat
resource name PNG
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.Uztuby.4!c
Elastic malicious (high confidence)
Cynet Malicious (score: 100)
CAT-QuickHeal Trojan.DCRat.S29707587
Skyhigh BehavesLike.Win32.Generic.th
ALYac Trojan.MSIL.Basic.8.Gen
Cylance unsafe
VIPRE Trojan.Uztuby.17
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Spyware ( 0058ebd51 )
BitDefender Trojan.Uztuby.17
K7GW Spyware ( 0058ebd51 )
Cybereason malicious.0dbcee
Arcabit Trojan.Uztuby.17 [many]
VirIT Trojan.VBS.Agent.BEX
Symantec Trojan.Gen.2
ESET-NOD32 multiple detections
APEX Malicious
McAfee Artemis!6E6F8BC0DBCE
Avast Win32:CrypterX-gen [Trj]
ClamAV Win.Packed.Msilmamut-9950860-0
Kaspersky Trojan.VBS.Agent.bet
Alibaba Backdoor:MSIL/DCRat.d96976b2
MicroWorld-eScan Trojan.Uztuby.17
Rising Backdoor.DcRat!8.129D9 (CLOUD)
Emsisoft Trojan.Uztuby.17 (B)
F-Secure Heuristic.HEUR/AGEN.1323984
DrWeb Trojan.PWS.StealerNET.124
TrendMicro TROJ_GEN.R002C0DD324
FireEye Trojan.Uztuby.17
Sophos Troj/DCRat-N
Ikarus Trojan.VBS.Runner
Google Detected
Avira VBS/Runner.VPG
MAX malware (ai score=86)
Gridinsoft Trojan.Win32.Agent.sa
Microsoft Backdoor:MSIL/DCRat!MTB
ZoneAlarm HEUR:Backdoor.MSIL.DCRat.gen
GData Win32.Trojan.BSE.1CL7UZW
Varist W32/S-1b09bef6!Eldorado
BitDefenderTheta Gen:NN.ZemsilF.36802.Zq0@aa8BYAhi
DeepInstinct MALICIOUS
Malwarebytes Generic.Spyware.Stealer.DDS
Panda Trj/CI.A
TrendMicro-HouseCall TROJ_GEN.R002C0DD324
SentinelOne Static AI - Malicious SFX
MaxSecure Trojan.Malware.121218.susgen
Fortinet MSIL/Agent.DVA!tr
AVG Win32:CrypterX-gen [Trj]