popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

DelHosts.exe

UPX PE32 PE File
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us May 30, 2024, 7:25 a.m. May 30, 2024, 7:34 a.m.
Size 328.9KB
Type PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5 b0283aa6cc06b0880a1681f2c9802f05
SHA256 e53630de39937a263e8e87652569cb0815adfc700a42956ff960b8a18fc5a086
CRC32 5CEC5A0B
ssdeep 6144:x68oipnnK9jqXEX52Ums+Tbxzbx9SmIqQyPodMUf8Dkzel6R8zHe1It:3fnnK9zABs+TbFx9SXOPCf8DkqAR8zHz
Yara
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • UPX_Zero - UPX packed file

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

IsDebuggerPresent

 0 0

IsDebuggerPresent

 0 0
Time & API Arguments Status Return Repeated

GlobalMemoryStatusEx

 1 1 0
packer UPX 2.90 [LZMA] -> Markus Oberhumer, Laszlo Molnar & John Reiser
section {u'size_of_data': u'0x0004aa00', u'virtual_address': u'0x0007d000', u'entropy': 7.940965856094214, u'name': u'UPX1', u'virtual_size': u'0x0004b000'} entropy 7.94096585609 description A section with a high entropy has been found
entropy 0.911450381679 description Overall entropy of this PE file is high
section UPX0 description Section name indicates UPX
section UPX1 description Section name indicates UPX
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.Autoit.4!c
Elastic malicious (moderate confidence)
Skyhigh BehavesLike.Win32.Yahlover.fc
ALYac Trojan.GenericKD.66127682
Cylance unsafe
VIPRE Trojan.GenericKD.66127682
Sangfor Trojan.Win32.Packed.V9dt
K7AntiVirus Trojan ( 0056316d1 )
BitDefender Trojan.GenericKD.66127682
K7GW Trojan ( 0056316d1 )
Cybereason malicious.6cc06b
Arcabit Trojan.Generic.D3F10742
VirIT Trojan.Win32.Generic.XTX
Symantec Trojan.Gen.2
ESET-NOD32 a variant of Win32/Packed.Autoit.NBT suspicious
APEX Malicious
McAfee Artemis!B0283AA6CC06
Avast Win32:Evo-gen [Trj]
ClamAV Win.Malware.Generic-6651791-0
Alibaba Packed:Win32/Generic.6e69437b
MicroWorld-eScan Trojan.GenericKD.66127682
Emsisoft Trojan.GenericKD.66127682 (B)
DrWeb Trojan.Siggen5.59949
Zillya Trojan.AutoIT.Win32.176619
McAfeeD ti!E53630DE3993
Trapmine malicious.high.ml.score
FireEye Generic.mg.b0283aa6cc06b088
Sophos Mal/Generic-S
Ikarus PUA.Autoit
Webroot W32.Trojan.Gen
Google Detected
Antiy-AVL Trojan[Packed]/Win32.Autoit
Gridinsoft Trojan.Win32.CoinMiner.dd!s2
Xcitium TrojWare.Win32.Hider.REXR@5364l6
Microsoft Trojan:Win32/Wacatac.A!ml
ViRobot Trojan.Win32.A.Agent.690283[UPX]
GData Win32.Trojan.PSE.R2WKDE
Varist W32/Trojan.IJBN-1595
DeepInstinct MALICIOUS
VBA32 IMWorm.Sohanad
Malwarebytes Generic.Malware.AI.DDS
Panda Trj/Chgt.AD
TrendMicro-HouseCall TROJ_GEN.R002H0CBN24
Yandex Trojan.GenAsa!i9rai7w7/WE
MAX malware (ai score=89)
MaxSecure Trojan.Malware.204080180.susgen
Fortinet Riskware/Application
AVG Win32:Evo-gen [Trj]
Paloalto generic.ml