popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

bypass.exe

Generic Malware Malicious Library UPX Malicious Packer PE64 PE File OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 July 11, 2024, 1:20 p.m. July 11, 2024, 1:32 p.m.
Size 273.5KB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 2a46814f73c0ee996868df06146b5be4
SHA256 b38322b2a1b73a0f2f1486ff04d8b7db1f5193e804897c16de83e4be7eddc647
CRC32 8FC44C20
ssdeep 3072:3oRj/uPUQqn2+PXBjONfJmneg7/qO8Z5u1v9pXgICN+ls4oY46gl5/Vx0LUlu:3ouUT2AXBjONfQeM/qOksx1ohXVlu
PDB Path C:\Users\bm\Desktop\BypassUAC-main\x64\Release\BypassUAC.pdb
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • Malicious_Packer_Zero - Malicious Packer
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

registry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\MachineGuid
pdb_path C:\Users\bm\Desktop\BypassUAC-main\x64\Release\BypassUAC.pdb
section _RDATA
Time & API Arguments Status Return Repeated

NtAllocateVirtualMemory

 process_identifier: 2656
region_size: 65536
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x0000000001c80000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffffffffffff
1 0 0
Bkav W64.AIDetectMalware
Elastic malicious (moderate confidence)
Cynet Malicious (score: 99)
Cylance Unsafe
Sangfor Trojan.Win32.Agent.V117
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win64/Agent.AXZ
APEX Malicious
McAfee Artemis!2A46814F73C0
Avast Win64:MalwareX-gen [Trj]
Kaspersky Trojan.Win32.BypassUAC.arp
Alibaba Trojan:Win32/BypassUAC.8f923212
Rising Trojan.Agent!8.B1E (CLOUD)
McAfeeD ti!B38322B2A1B7
Sophos Mal/Generic-S
Ikarus Win32.Outbreak
Avira TR/AVI.Agent.fdxvp
Kingsoft Win32.Troj.Unknown.a
Microsoft Program:Win32/Wacapew.C!ml
ZoneAlarm Trojan.Win32.BypassUAC.arp
DeepInstinct MALICIOUS
Malwarebytes Generic.Malware/Suspicious
Tencent Malware.Win32.Gencirc.13e62365
MaxSecure Trojan.Malware.300983.susgen
AVG Win64:MalwareX-gen [Trj]
alibabacloud Trojan:Win/BypassUAC.axi