popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

AppGate2103v15.exe

MPRESS PE64 PE File
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 April 13, 2024, 11:20 a.m. April 13, 2024, 11:20 a.m.
Size 3.1MB
Type MS-DOS executable, MZ for MS-DOS
MD5 5c0d04ccd0cbcd8cc90a502df8b512e7
SHA256 bc84c3a9cfeb083fe41a238c55ea3163b5c9e5103fee0a7d7f4d8a1236b6d22d
CRC32 DA24716E
ssdeep 49152:fEOGfMr0UrM21zm6mVonU7JCGjh9FDrjop1jy50JtrD2sGxgLJ+r8+NSR63xrO0s:rtr0CnnGJCGl9GDnrNGaLJ5RKxy
Yara
  • IsPE64 - (no description)
  • PE_Header_Zero - PE File Signature
  • MPRESS_Zero - MPRESS packed file

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section .MPRESS1
section .MPRESS2
section {u'size_of_data': u'0x00300e00', u'virtual_address': u'0x00001000', u'entropy': 7.999934851948139, u'name': u'.MPRESS1', u'virtual_size': u'0x00704000'} entropy 7.99993485195 description A section with a high entropy has been found
entropy 0.953791285471 description Overall entropy of this PE file is high