popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

63e909b3647d.exe

Generic Malware Malicious Library UPX PE File OS Processor Check PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us Oct. 17, 2024, 2:30 p.m. Oct. 17, 2024, 2:30 p.m.
Size 1.5MB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 790a583c92b1575850a1a18adcb6c3bb
SHA256 41c368c21f9011b53c84f94a27c897373a294bcbbf9bf05c7bb7d7088b4049b8
CRC32 553BEE3C
ssdeep 12288:cwU7U4aFpPwDW5Z833VCr9sNiWbA6AGliQE83DEO:M7U4aFp9ZQ3VNbAlGs4Tt
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section .BSS
section {u'size_of_data': u'0x00053800', u'virtual_address': u'0x0001b000', u'entropy': 7.995044998519613, u'name': u'.data', u'virtual_size': u'0x000541c4'} entropy 7.99504499852 description A section with a high entropy has been found
entropy 0.220462046205 description Overall entropy of this PE file is high