popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

NJTCFVIV.exe

Generic Malware Malicious Library UPX Malicious Packer PE64 PE File DLL OS Processor Check PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Aug. 11, 2024, 2:25 p.m. Aug. 11, 2024, 3 p.m.
Size 6.6MB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 c350fa7b1a8b9cbbab1ae59e00575209
SHA256 c8f53fd939b1b4140b33fe6cfb6128d0b7d7c788400b88dbbcf173d8f2c9f241
CRC32 1431B2BF
ssdeep 98304:+pwpuZMdDiBGmsn81Xckvi/b3JAfZvENiqS+oqN52ybAbqhrqOKja7FoyIV:+pwPdD4GlaA/TJAftDqS+oqLbVbKj6SV
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • UPX_Zero - UPX packed file

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

IsDebuggerPresent

 0 0
Time & API Arguments Status Return Repeated

GlobalMemoryStatusEx

 1 1 0
packer Armadillo v1.71
Time & API Arguments Status Return Repeated

NtProtectVirtualMemory

 process_identifier: 2548
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x73bc2000
process_handle: 0xffffffff
1 0 0
Time & API Arguments Status Return Repeated

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13316562944
root_path: C:\Users\test22\AppData\Local\Temp
total_number_of_bytes: 0
1 1 0
file C:\Users\test22\AppData\Local\Temp\slog.pptx
file C:\Users\test22\AppData\Local\Temp\identity_helper.exe
file C:\Users\test22\AppData\Local\Temp\msedge_elf.dll
file C:\Users\test22\AppData\Local\Temp\identity_helper.exe
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.Penguish.4!c
Elastic malicious (moderate confidence)
Cynet Malicious (score: 99)
Cylance Unsafe
Sangfor Downloader.Win32.Rugmi.V1ty
K7AntiVirus Trojan ( 005b4e9b1 )
K7GW Trojan ( 005b4e9b1 )
Paloalto generic.ml
Symantec Trojan.Gen.MBT
ESET-NOD32 a variant of Win64/TrojanDownloader.Rugmi.CL.gen
McAfee Artemis!C350FA7B1A8B
Avast Win32:Malware-gen
Kaspersky Trojan.Win32.Penguish.bzj
Alibaba TrojanDownloader:Win32/Penguish.6d32a85a
Rising Downloader.Rugmi!8.11816 (CLOUD)
F-Secure Trojan.TR/AVI.Agent.nsazg
McAfeeD ti!C8F53FD939B1
Sophos Mal/Generic-S
Jiangmin Trojan.Penguish.bz
Google Detected
Avira TR/AVI.Agent.usvzr
Kingsoft Win32.Troj.Unknown.a
Microsoft Trojan:Win32/Wacatac.B!ml
ZoneAlarm Trojan.Win32.Penguish.bzj
Varist W32/ABTrojan.SOYP-1994
Malwarebytes Trojan.PyengyLoader
Ikarus Trojan.Rugmi
Tencent Win32.Trojan.Penguish.Czlw
Fortinet W64/Agent.98E8!tr
AVG Win32:Malware-gen
Panda Trj/Chgt.AD
CrowdStrike win/grayware_confidence_60% (W)
alibabacloud Trojan[downloader]:Win/Rugmi.CE