popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

univ.exe

Generic Malware Malicious Library UPX PE File OS Processor Check PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us May 15, 2024, 9:11 a.m. May 15, 2024, 9:14 a.m.
Size 284.5KB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 9b9b6eed588a5f1c17864c641aaf22d3
SHA256 d19ddc1ec032c500925756a79726b27a77b677b5bc17e38eb4ab03a9b66e479c
CRC32 8F999D9A
ssdeep 6144:po72NBEPwO/0N4NdmoHoQqtWpuhjEqhMD5J:myfEPwO8N4NdnIQqSuhjCDv
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • UPX_Zero - UPX packed file
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

resource name AFX_DIALOG_LAYOUT
name RT_ICON language LANG_JAPANESE filetype GLS_BINARY_LSB_FIRST sublanguage SUBLANG_DEFAULT offset 0x00399e70 size 0x00000468
name RT_ICON language LANG_JAPANESE filetype GLS_BINARY_LSB_FIRST sublanguage SUBLANG_DEFAULT offset 0x00399e70 size 0x00000468
name RT_ICON language LANG_JAPANESE filetype GLS_BINARY_LSB_FIRST sublanguage SUBLANG_DEFAULT offset 0x00399e70 size 0x00000468
name RT_ICON language LANG_JAPANESE filetype GLS_BINARY_LSB_FIRST sublanguage SUBLANG_DEFAULT offset 0x00399e70 size 0x00000468
name RT_ICON language LANG_JAPANESE filetype GLS_BINARY_LSB_FIRST sublanguage SUBLANG_DEFAULT offset 0x00399e70 size 0x00000468
name RT_ICON language LANG_JAPANESE filetype GLS_BINARY_LSB_FIRST sublanguage SUBLANG_DEFAULT offset 0x00399e70 size 0x00000468
name RT_ICON language LANG_JAPANESE filetype GLS_BINARY_LSB_FIRST sublanguage SUBLANG_DEFAULT offset 0x00399e70 size 0x00000468
name RT_STRING language LANG_JAPANESE filetype data sublanguage SUBLANG_DEFAULT offset 0x0039d138 size 0x00000294
name RT_STRING language LANG_JAPANESE filetype data sublanguage SUBLANG_DEFAULT offset 0x0039d138 size 0x00000294
name RT_STRING language LANG_JAPANESE filetype data sublanguage SUBLANG_DEFAULT offset 0x0039d138 size 0x00000294
name RT_GROUP_ICON language LANG_JAPANESE filetype data sublanguage SUBLANG_DEFAULT offset 0x0039a2d8 size 0x00000068
section {u'size_of_data': u'0x00025a00', u'virtual_address': u'0x00019000', u'entropy': 7.848710066012676, u'name': u'.data', u'virtual_size': u'0x0037a3c8'} entropy 7.84871006601 description A section with a high entropy has been found
entropy 0.530864197531 description Overall entropy of this PE file is high
Bkav W32.AIDetectMalware
Elastic malicious (high confidence)
Cynet Malicious (score: 100)
Skyhigh BehavesLike.Win32.Lockbit.dc
Cylance unsafe
Sangfor Trojan.Win32.Save.a
K7AntiVirus Ransomware ( 0053d5971 )
K7GW Ransomware ( 0053d5971 )
Symantec ML.Attribute.HighConfidence
APEX Malicious
Avast TrojanX-gen [Trj]
ClamAV Win.Packer.pkr_ce1a-9980177-0
Kaspersky VHO:Trojan-Downloader.Win32.GCleaner.gen
Rising Trojan.SmokeLoader!1.F6B2 (CLASSIC)
F-Secure Trojan.TR/Crypt.XPACK.Gen4
Trapmine malicious.high.ml.score
FireEye Generic.mg.9b9b6eed588a5f1c
Sophos Troj/Krypt-VK
Ikarus Trojan.Win32.Danabot
Google Detected
Avira TR/Crypt.XPACK.Gen4
Kingsoft malware.kb.a.1000
Gridinsoft Ransom.Win32.STOP.dg!n
ZoneAlarm VHO:Trojan-Downloader.Win32.GCleaner.gen
Varist W32/Kryptik.LWN.gen!Eldorado
BitDefenderTheta Gen:NN.ZexaF.36804.rq0@aq7rZOjG
DeepInstinct MALICIOUS
VBA32 Malware-Cryptor.Azorult.gen
Tencent Trojan.Win32.Obfuscated.gen
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/GenCBL.FAZ!tr
AVG TrojanX-gen [Trj]