popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

public.dll

Generic Malware UPX Malicious Packer PE64 PE File DLL OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us Aug. 6, 2024, 9:20 a.m. Aug. 6, 2024, 9:36 a.m.
Size 31.5KB
Type PE32+ executable (DLL) (console) x86-64, for MS Windows
MD5 1e6e7fe9584055fc71294dc35a55241c
SHA256 c49d3eeeb6f2ecac701de73c4b6ed63e4aa8db0be2516af2bd84b36538557ddf
CRC32 F14B6A9D
ssdeep 384:NG5dslhJrXRdOGxqjXrABGgJYUBXc7arFiszL3YfLP8BIf/yHFC:N8dWkdjEwgJyQ3SoSy
PDB Path E:\source\NanoDump_DLL_V1\x64\Release\NanoDump_DLL.pdb
Yara
  • PE_Header_Zero - PE File Signature
  • Malicious_Packer_Zero - Malicious Packer
  • IsDLL - (no description)
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path E:\source\NanoDump_DLL_V1\x64\Release\NanoDump_DLL.pdb
section _RDATA
Elastic malicious (high confidence)
Cynet Malicious (score: 100)
Sophos ATK/NanoDump-A
Google Detected
Microsoft Worm:Win32/Gamarue!ml