popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

lazagne.exe

Gen1 Generic Malware Malicious Library UPX PE64 PE File OS Processor Check DLL
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us April 30, 2024, 7:32 a.m. April 30, 2024, 7:37 a.m.
Size 6.3MB
Type PE32+ executable (console) x86-64, for MS Windows
MD5 68d3bf2c363144ec6874ab360fdda00a
SHA256 ed2f501408a7a6e1a854c29c4b0bc5648a6aa8612432df829008931b3e34bf56
CRC32 12C8D851
ssdeep 196608:MG4YKWwsbycm/iAjf+UAYt+sIqXrgiQZGHluk6s:cYBwSdm6AIsf3QZAlJ
Yara
  • IsPE64 - (no description)
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • UPX_Zero - UPX packed file
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section .gfids
Time & API Arguments Status Return Repeated

NtAllocateVirtualMemory

 process_identifier: 2092
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x0000000001e00000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffffffffffff
1 0 0
file C:\Users\test22\AppData\Local\Temp\_MEI16482\msvcp100.dll
file C:\Users\test22\AppData\Local\Temp\_MEI16482\msvcr100.dll
file C:\Users\test22\AppData\Local\Temp\_MEI16482\pywintypes27.dll
file C:\Users\test22\AppData\Local\Temp\_MEI16482\python27.dll
file C:\Users\test22\AppData\Local\Temp\_MEI16482\MSVCR90.dll
file C:\Users\test22\AppData\Local\Temp\_MEI16482\sqlite3.dll
section {u'size_of_data': u'0x0000ec00', u'virtual_address': u'0x00046000', u'entropy': 7.297139614323312, u'name': u'.rsrc', u'virtual_size': u'0x0000ea38'} entropy 7.29713961432 description A section with a high entropy has been found
entropy 0.221804511278 description Overall entropy of this PE file is high
Bkav W64.AIDetectMalware
Lionic Hacktool.Win32.LaZagne.3!c
Cynet Malicious (score: 99)
Skyhigh HTool-Lazagne
ALYac Misc.HackTool.LaZagne
Cylance unsafe
VIPRE Gen:Heur.Clyp.11
BitDefender Gen:Heur.Clyp.11
Arcabit Trojan.Clyp.11
VirIT HackTool.Win32.Lazagne.CLI
Symantec Hacktool
Elastic malicious (high confidence)
ESET-NOD32 multiple detections
APEX Malicious
McAfee HTool-Lazagne
Avast Other:PUP-gen [PUP]
ClamAV Win.Trojan.Lazagne-6779429-0
Kaspersky HackTool.Win32.LaZagne.cw
Alibaba Hacktool:Py/Passwd.200915
NANO-Antivirus Trojan.Win64.LaZagne.fzsvkt
MicroWorld-eScan Gen:Heur.Clyp.11
Emsisoft Gen:Heur.Clyp.11 (B)
F-Secure PrivacyRisk.SPR/LaZagne.B
DrWeb Tool.Pwdump.360
TrendMicro HackTool.Win64.LAZAGNE.AE
FireEye Gen:Heur.Clyp.11
Sophos ATK/LaZagne-N
Ikarus not-a-virus:Hacktool.Lazagne
Webroot W32.HackTool.Gen
Google Detected
Avira SPR/LaZagne.B
MAX malware (ai score=100)
Antiy-AVL Trojan[APT]/Python.Volatilecedar
Kingsoft Win32.HackTool.LaZagne.cw
Xcitium Malware@#1y7bgipppfgn5
Microsoft HackTool:Win32/LaZagne
ZoneAlarm HackTool.Win32.LaZagne.cw
GData Gen:Heur.Clyp.11
Varist W64/LaZagne.A.gen!Eldorado
AhnLab-V3 HackTool/Win.LaZagne.R297990
DeepInstinct MALICIOUS
Malwarebytes Neshta.Virus.FileInfector.DDS
Panda Trj/CI.A
TrendMicro-HouseCall HackTool.Win64.LAZAGNE.AE
Tencent Win32.Hacktool.Lazagne.Ewnw
Yandex Trojan.Igent.bVOuld.13
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.11658333.susgen
Fortinet Riskware/LaZagne
AVG Other:PUP-gen [PUP]