popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

file300un.exe

Generic Malware Malicious Library UPX Malicious Packer PE64 PE File OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 May 11, 2024, 7:27 p.m. May 11, 2024, 7:44 p.m.
Size 2.7MB
Type PE32+ executable (console) x86-64, for MS Windows
MD5 d2f812118c89341715fbff0ba9530396
SHA256 716741d85859c7c4747395deb709dc0b4b2741a0d15850aa3a706cc05d61bf6d
CRC32 5D0B642D
ssdeep 24576:tRoBHi3buy4toE1jC6Ayo2xhWLbSPlqRvc68XzRVGvQB5VA0UC1dUUKj/LZ8j3gy:boKmo4jC6Tov2RUC1doj/wgy
Yara
  • IsPE64 - (no description)
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • Malicious_Packer_Zero - Malicious Packer
  • UPX_Zero - UPX packed file
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

GlobalMemoryStatusEx

 1 1 0
section .managed
section hydrated
section _RDATA
section .m4lw4r3
section {u'size_of_data': u'0x00002c00', u'virtual_address': u'0x00346000', u'entropy': 7.907591450613791, u'name': u'.m4lw4r3', u'virtual_size': u'0x00003000'} entropy 7.90759145061 description A section with a high entropy has been found
Lionic Trojan.Win32.PBLoader.a!c
Elastic malicious (high confidence)
Skyhigh Artemis!Trojan
Cylance unsafe
Sangfor Downloader.Msil.Kryptik.Vu47
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win64/GenKryptik.GXKH
McAfee Artemis!D2F812118C89
Avast PWSX-gen [Trj]
Kaspersky Trojan-Downloader.MSIL.PBLoader.p
Rising Backdoor.Androm!8.113 (TFE:5:o0l3RIooCEG)
DrWeb Trojan.Inject5.4868
TrendMicro Trojan.Win64.OPERALOADER.YXEEKZ
Sophos Mal/Generic-S
Ikarus Win32.Outbreak
Webroot W32.Trojan.Gen
Google Detected
Avira TR/AD.Nekark.lkpog
Antiy-AVL Trojan/Win64.GenKryptik
Kingsoft Win32.Troj.Undef.a
Gridinsoft Malware.Win64.PrivateLoader.tr
Microsoft TrojanDownloader:MSIL/Taily
ZoneAlarm UDS:Trojan-Downloader.MSIL.PBLoader.p
GData Win32.Trojan.Ilgergop.KI9CFC
Varist W64/ABRisk.ATGK-3316
DeepInstinct MALICIOUS
Malwarebytes Malware.AI.4279885043
Fortinet W64/GenKryptik.GUVY!tr
AVG PWSX-gen [Trj]
Paloalto generic.ml