popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

MediaCreationTool_Win11_23H2.exe

Gen1 Generic Malware Malicious Library UPX Malicious Packer PE File PE32 CAB
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Sept. 25, 2024, 9:14 p.m. Sept. 25, 2024, 9:15 p.m.
Size 9.6MB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 25c9285c00ef7d41b28823a053a9a372
SHA256 767e70c43673063a16d76e494ffcdfa0f5a85c53344a0dc505f161cccf2f5b1b
CRC32 D3930FE4
ssdeep 196608:x2eDMIIKEW+sisSMo/dlv1DL6D+ZwN5uW/GVTVH9HoxCZWdz2s71:hIKRbib71DJ2NITVFoYZWdhB
PDB Path SetupPrep.pdb
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • Malicious_Packer_Zero - Malicious Packer
  • CAB_file_format - CAB archive file
  • Win32_Trojan_Gen_1_0904B0_Zero - Win32 Trojan Emotet
  • IsPE32 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • UPX_Zero - UPX packed file

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path SetupPrep.pdb
section .didat
section .boxload
resource name IMAGE
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074
name RT_DIALOG language LANG_SERBIAN filetype data sublanguage SUBLANG_ARABIC_YEMEN offset 0x000eb434 size 0x00000074