Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

Summary | ZeroBOX

2.exe

Generic Malware Malicious Library UPX Malicious Packer PE File dll OS Processor Check PE32 DllRegisterServer

Category	Machine	Started	Completed
FILE	s1_win7_x6401	Aug. 22, 2024, 6:04 p.m.	Aug. 22, 2024, 6:07 p.m.

Size	14.4MB
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`7cb00da13fecc6e830750d67c836766d`
SHA256	`79069715888789e0243c3b25b4e14b5bcb561a19aa9acafa6b9de2db9af24c2e`
CRC32	`8EAF4993`
ssdeep	`98304:ZcinV2afGKTXn2AkWAmtqtOqZfXKmznUcG8DTZ6gIn9Z6ILnSDQZ+MCGzUwr3HUh:Lgcq3L3G8D1v23HK`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer DllRegisterServer_Zero - execute regsvr32.exe IsPE32 - (no description) Generic_Malware_Zero - Generic Malware UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check

2.exe "C:\Users\test22\AppData\Local\Temp\2.exe"
2552

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

The executable contains unknown PE section names indicative of a packer (could be a false positive) (1 event)

section

.symtab