popup
Static | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Static Analysis

PE Compile Time

2010-04-15 07:06:53

PE Imphash

b4c6fff030479aa3b12625be67bf4914

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0000104e 0x00001200 0.168100494025
.rdata 0x00003000 0x00000084 0x00000200 0.963086734599
.jdlj 0x00004000 0x00000278 0x00000400 4.29803757344

Imports

Library KERNEL32.dll:
• 0x140003000 VirtualAlloc
• 0x140003008 ExitProcess
!This program cannot be run in DOS mode.
Rich}E
`.rdata
@.jdlj
PAYLOAD:
ExitProcess
VirtualAlloc
KERNEL32.dll
AQAPRH1
R QVM1
AXAX^YZAXAYAZH
ws2_32
A^PPM1
}(XAWYh
KERNEL32.dll
VirtualAlloc
ExitProcess
Antivirus Signature
Bkav W64.AIDetectMalware
Lionic Clean
tehtris Clean
MicroWorld-eScan Trojan.Metasploit.A
CMC Clean
CAT-QuickHeal HackTool.Metasploit.S9212471
ALYac Trojan.Metasploit.A
Cylance Unsafe
Zillya Clean
Sangfor HackTool.Win32.Reverse64_Bin_v2_5_through_v4_x.uwccg
K7AntiVirus Trojan ( 004fae881 )
K7GW Trojan ( 004fae881 )
Cybereason malicious.578101
Baidu Clean
Symantec Trojan Horse
ESET-NOD32 a variant of Win64/Rozena.M
APEX Malicious
Paloalto Clean
Cynet Malicious (score: 100)
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Sophos ATK/Meter-A
F-Secure Trojan.TR/Crypt.XPACK.Gen7
DrWeb BackDoor.Shell.244
VIPRE Trojan.Metasploit.A
TrendMicro Clean
McAfeeD Real Protect-LS!58840F757810
Trapmine malicious.high.ml.score
Emsisoft Trojan.Metasploit.A (B)
SentinelOne Static AI - Malicious PE
Jiangmin Trojan.Generic.auyjj
Webroot Clean
Avira TR/Crypt.XPACK.Gen7
Antiy-AVL GrayWare/Win32.Rozena.j
Kingsoft malware.kb.b.980
Gridinsoft Trojan.Win64.ShellCode.sd!s1
Xcitium Clean
Arcabit Trojan.Metasploit.A
SUPERAntiSpyware Trojan.Agent/Gen-MalPack
ZoneAlarm HEUR:Trojan.Win64.Packed.gen
Google Detected
AhnLab-V3 Trojan/Win32.RL_Generic.R357794
Acronis suspicious
BitDefenderTheta Clean
TACHYON Clean
VBA32 Clean
Malwarebytes Trojan.Dropper.Generic
Panda Clean
Zoner Probably Heur.ExeHeaderL
TrendMicro-HouseCall Clean
Tencent Hacktool.Win64.Rozena.a
Yandex Trojan.GenAsa!RZuPNlUDbQk
Ikarus Trojan.Win64.Meterpreter
MaxSecure Trojan.Malware.300983.susgen
Fortinet W64/Rozena.J!tr
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_100% (D)
alibabacloud Backdoor:Win/shellcode.api(dyn)
No IRMA results available.