15.exe| Category | Machine | Started | Completed |
|---|---|---|---|
| FILE | s1_win7_x6403_us | Jan. 27, 2025, 4:40 p.m. | Jan. 27, 2025, 5:09 p.m. |
-
15.exe "C:\Users\test22\AppData\Local\Temp\15.exe"
416
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
| IP Address | Status | Action |
|---|---|---|
| No hosts contacted. | ||
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
| pdb_path | G:\ç®å½\2025å·¥ä½ç«\主æ§å·¥ç¨\主æ§ä¿®å¤ä¸çº¿å \shellcode\æ³¨å ¥èªèº«è¿ç¨\Release\æ³¨å ¥èªèº«è¿ç¨.pdb |
| resource name | None |
| name | RT_DIALOG | language | LANG_CHINESE | filetype | data | sublanguage | SUBLANG_CHINESE_SIMPLIFIED | offset | 0x000844c0 | size | 0x00000040 | ||||||||||||||||||
| name | RT_DIALOG | language | LANG_CHINESE | filetype | data | sublanguage | SUBLANG_CHINESE_SIMPLIFIED | offset | 0x000844c0 | size | 0x00000040 | ||||||||||||||||||
| name | RT_DIALOG | language | LANG_CHINESE | filetype | data | sublanguage | SUBLANG_CHINESE_SIMPLIFIED | offset | 0x000844c0 | size | 0x00000040 | ||||||||||||||||||
| name | RT_DIALOG | language | LANG_CHINESE | filetype | data | sublanguage | SUBLANG_CHINESE_SIMPLIFIED | offset | 0x000844c0 | size | 0x00000040 | ||||||||||||||||||
| name | RT_DIALOG | language | LANG_CHINESE | filetype | data | sublanguage | SUBLANG_CHINESE_SIMPLIFIED | offset | 0x000844c0 | size | 0x00000040 | ||||||||||||||||||
| name | RT_DIALOG | language | LANG_CHINESE | filetype | data | sublanguage | SUBLANG_CHINESE_SIMPLIFIED | offset | 0x000844c0 | size | 0x00000040 | ||||||||||||||||||
| name | RT_DIALOG | language | LANG_CHINESE | filetype | data | sublanguage | SUBLANG_CHINESE_SIMPLIFIED | offset | 0x000844c0 | size | 0x00000040 | ||||||||||||||||||
| name | RT_DIALOG | language | LANG_CHINESE | filetype | data | sublanguage | SUBLANG_CHINESE_SIMPLIFIED | offset | 0x000844c0 | size | 0x00000040 | ||||||||||||||||||
| name | RT_STRING | language | LANG_CHINESE | filetype | data | sublanguage | SUBLANG_CHINESE_SIMPLIFIED | offset | 0x0008454c | size | 0x0000020a | ||||||||||||||||||
| name | RT_STRING | language | LANG_CHINESE | filetype | data | sublanguage | SUBLANG_CHINESE_SIMPLIFIED | offset | 0x0008454c | size | 0x0000020a | ||||||||||||||||||
| section | {u'size_of_data': u'0x00099200', u'virtual_address': u'0x00058000', u'entropy': 7.734550009125889, u'name': u'.rsrc', u'virtual_size': u'0x00099198'} | entropy | 7.73455000913 | description | A section with a high entropy has been found | |||||||||
| entropy | 0.6376887038 | description | Overall entropy of this PE file is high | |||||||||||
| Bkav | W32.AIDetectMalware |
| Lionic | Trojan.Win32.Babar.4!c |
| Cynet | Malicious (score: 99) |
| ALYac | Gen:Variant.Babar.540722 |
| Cylance | Unsafe |
| VIPRE | Gen:Variant.Jaik.263476 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| BitDefender | Gen:Variant.Jaik.263476 |
| K7GW | Trojan ( 005c00a71 ) |
| K7AntiVirus | Trojan ( 005c00a71 ) |
| Arcabit | Trojan.Jaik.D40534 |
| Symantec | Trojan Horse |
| Elastic | Windows.Trojan.TwistedTinsel |
| ESET-NOD32 | a variant of Win32/Agent.AHCE |
| Avast | Win32:Agent-BDDR [Drp] |
| Kaspersky | HEUR:Trojan.Win32.Agentb.gen |
| Alibaba | Trojan:Win32/Generic.4506b8e1 |
| MicroWorld-eScan | Gen:Variant.Jaik.263476 |
| Rising | Malware.Undefined!8.C (TFE:5:9u6a2PLrbiL) |
| Emsisoft | Gen:Variant.Jaik.263476 (B) |
| F-Secure | Trojan.TR/Agent.smydy |
| McAfeeD | ti!C0D4F2482F61 |
| CTX | exe.trojan.generic |
| Sophos | Mal/Generic-S |
| FireEye | Generic.mg.25399cb8cb5a702b |
| Webroot | Win.Trojan.Babar |
| Detected | |
| Avira | TR/Agent.smydy |
| Antiy-AVL | GrayWare/Win32.Wacapew |
| Kingsoft | Win32.Trojan.Agentb.gen |
| Gridinsoft | Ransom.Win32.Wacatac.sa |
| Microsoft | Trojan:Win32/Wacatac.B!ml |
| GData | Gen:Variant.Jaik.263476 |
| AhnLab-V3 | Dropper/Win.Generic.R689899 |
| McAfee | Artemis!25399CB8CB5A |
| DeepInstinct | MALICIOUS |
| VBA32 | BScope.Trojan.Downloader |
| Malwarebytes | Malware.AI.1163237881 |
| Ikarus | Trojan.Win32.Agent |
| TrendMicro-HouseCall | TROJ_GEN.R002H09AQ25 |
| Tencent | Malware.Win32.Gencirc.10c0a4c2 |
| Yandex | Trojan.Agent!ut1/lfR1OZ8 |
| MaxSecure | Trojan.Malware.300983.susgen |
| Fortinet | W32/Agent.AHCE!tr |
| AVG | Win32:Agent-BDDR [Drp] |
| alibabacloud | Trojan:Win/Wacatac.B9nj |