popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

xiaowei.exe

Generic Malware Malicious Library UPX Malicious Packer PE File OS Processor Check PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us April 12, 2024, 3:07 p.m. April 12, 2024, 3:07 p.m.
Size 2.9MB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 f45e5767d03136c0d17907185bb0ffef
SHA256 23023ea2066677a99c1a54cf8a7e18493cd68814cc5b7f0da6505d7b07286acd
CRC32 9B7C6F8E
ssdeep 49152:MePywd8cMszhEefrahLaFq/EZjdss+DyT5sdO99WiaQ1BQpcoaHFUc5KqvP6IDU4:Ewd8cMszhEefQLaFDZjdJ+DyT5sdO99u
PDB Path C:\Users\Yihsiwei\Desktop\大灰狼\PcServer\Release\PcServer.pdb
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • Malicious_Packer_Zero - Malicious Packer
  • IsPE32 - (no description)
  • UPX_Zero - UPX packed file
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path C:\Users\Yihsiwei\Desktop\大灰狼\PcServer\Release\PcServer.pdb
Bkav W32.AIDetectMalware
Cynet Malicious (score: 100)
Skyhigh GenericRXUD-LR!F45E5767D031
ALYac Gen:Variant.Adware.PennyBee.18
Cylance unsafe
Zillya Trojan.GenKryptik.Win32.331332
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Gen:Variant.Adware.PennyBee.18
K7GW Trojan ( 005979561 )
K7AntiVirus Trojan ( 005979561 )
Arcabit Trojan.Adware.PennyBee.18
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win32/Kryptik.HWBF
APEX Malicious
Avast Win32:RATX-gen [Trj]
ClamAV Win.Trojan.Mikey-9973650-0
Kaspersky HEUR:Backdoor.Win32.Farfli.gen
Alibaba Backdoor:Win32/Farfli.696b5d1a
NANO-Antivirus Trojan.Win32.Farfli.kepmrh
MicroWorld-eScan Gen:Variant.Adware.PennyBee.18
Rising Trojan.Generic@AI.100 (RDML:hqq8GfgsvK/czo9MvY98wQ)
Emsisoft Gen:Variant.Adware.PennyBee.18 (B)
F-Secure Trojan.TR/AD.Farfli.eibet
DrWeb Trojan.MulDrop24.22022
BitDefenderTheta Gen:NN.ZexaCO.36802.2wW@a00HEShi
TrendMicro TROJ_GEN.R002C0DDA24
FireEye Generic.mg.f45e5767d03136c0
Sophos Mal/Generic-S
Ikarus Trojan.Win32.Krypt
Google Detected
Avira TR/AD.Farfli.eibet
MAX malware (ai score=65)
Antiy-AVL Trojan/Win32.GenKryptik
Kingsoft Win32.Hack.Farfli.gen
Microsoft Backdoor:Win32/Farfli!pz
ZoneAlarm HEUR:Backdoor.Win32.Farfli.gen
GData Gen:Variant.Adware.PennyBee.18
Varist W32/ABRisk.YCJP-1758
AhnLab-V3 Trojan/Win.Generic.R519238
Acronis suspicious
McAfee GenericRXUD-LR!F45E5767D031
DeepInstinct MALICIOUS
VBA32 BScope.Backdoor.Farfli
Malwarebytes Crypt.Trojan.MSIL.DDS
Panda Trj/Genetic.gen
TrendMicro-HouseCall TROJ_GEN.R002C0DDA24
Tencent Malware.Win32.Gencirc.11b96783
SentinelOne Static AI - Suspicious PE