popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

getlab.exe

Emotet Malicious Library Confuser .NET UPX MZP Format PE File PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us Oct. 10, 2024, 9:31 a.m. Oct. 10, 2024, 9:31 a.m.
Size 3.9MB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 95ae9bdf69e84f774782ff6a33879571
SHA256 a171d24673022e2f47c2f562726f3f1d7fbe39ed67a3f18a3a606d7067fe3a57
CRC32 F71DA296
ssdeep 98304:xdpD26lvqOhK17GMTK4uts+OqMI8aoPedFokbpmBeE:Db/hK5bK7tsjLmcedvbpmBeE
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • ConfuserEx_Zero - Confuser .NET
  • Win32_Trojan_Emotet_2_Zero - Win32 Trojan Emotet
  • IsPE32 - (no description)
  • UPX_Zero - UPX packed file
  • mzp_file_format - MZP(Delphi) file format

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section CODE
section DATA
section BSS