popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

cve.exe

Gen1 Generic Malware Malicious Library ASPack UPX Anti_VM ftp PE64 PE File OS Processor Check ZIP Format DLL
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Aug. 5, 2024, 10:36 a.m. Aug. 5, 2024, 11 a.m.
Size 10.5MB
Type PE32+ executable (console) x86-64, for MS Windows
MD5 5ab40605ed83436660f1ea9f1900bed0
SHA256 7c0520ed937be2d09bd13d89370f5e5af1217fb0e27eef61b00224c813359495
CRC32 EE13D958
ssdeep 196608:fjm+UGFLOtEp6dQmRJ8dA6lwkaqdVTWbytLbF4MRWnjqtnO:K+UwatddQuslwwdkbyP4Myjen
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • ASPack_Zero - ASPack packed file
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

GlobalMemoryStatusEx

 1 1 0
section _RDATA
file C:\Users\test22\AppData\Local\Temp\_MEI26442\libcrypto-1_1.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26442\VCRUNTIME140.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26442\libssl-1_1.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26442\libffi-7.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26442\python310.dll
section {u'size_of_data': u'0x0000f200', u'virtual_address': u'0x00052000', u'entropy': 7.3562416368637376, u'name': u'.rsrc', u'virtual_size': u'0x0000f008'} entropy 7.35624163686 description A section with a high entropy has been found
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.Tiny.tsdM
Cynet Malicious (score: 99)
Cylance Unsafe
Sangfor Exploit.Python.CVE.Vqln
Symantec Trojan.Gen.MBT
ESET-NOD32 Python/Exploit.Agent.AB
McAfee Artemis!5AB40605ED83
Avast FileRepMalware [Misc]
Kaspersky HEUR:Exploit.Python.CVE-2020-1472.gen
Alibaba Exploit:Win32/CVE-2020-1472.5382a5b6
F-Secure Trojan.TR/Redcap.yrgqc
McAfeeD ti!7C0520ED937B
Sophos Mal/Generic-S
Avira TR/Redcap.yrgqc
Kingsoft Win32.Troj.Unknown.a
Microsoft Trojan:Win32/Wacatac.B!ml
ZoneAlarm HEUR:Exploit.Python.CVE-2020-1472.gen
AhnLab-V3 Exploit/Win.Agent.C5304190
DeepInstinct MALICIOUS
VBA32 Exploit.Python
Panda Trj/CI.A
Tencent Win32.Exploit.Cve-2020-1472.Ztjl
Fortinet W32/PossibleThreat
AVG FileRepMalware [Misc]
CrowdStrike win/malicious_confidence_100% (W)
alibabacloud Exploit:Win/MS17-010.E