popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

1.exe

Generic Malware Malicious Library UPX Anti_VM PE File OS Processor Check PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Aug. 6, 2024, 5:49 p.m. Aug. 6, 2024, 5:49 p.m.
Size 852.2KB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 c6eae5603e3b43a51d2d2c449db3f6be
SHA256 a1f94fa283270290a5365565dd6234d4eba89c394d3c8076c064f62c53cbb749
CRC32 28EDE6F3
ssdeep 12288:4uzzfSDgiGQbmkejmQJNT9MiH2wSD1ms1XJwDo3HY0nk25+Yn3anpgtQNZm1nthJ:YU7JNmiHjSnR3Ye5zapgtwZm1thGO
PDB Path D:\build\ob\bora-14665864\bora\build\build\setup\release\win32\setup.pdb
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • anti_vm_detect - Possibly employs anti-virtualization techniques
  • IsPE32 - (no description)
  • UPX_Zero - UPX packed file
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path D:\build\ob\bora-14665864\bora\build\build\setup\release\win32\setup.pdb
section .didat
resource name None