Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6403_us	Feb. 3, 2025, 10:04 a.m.	Feb. 3, 2025, 10:26 a.m.

Size	895.0KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`82575c3b5ffd6f4dbb50b30d22f240cb`
SHA256	`de2660dcf64aedfc6a55cc5ab3c30f9cbcbb0700481c8709a3e1eebe5d061702`
CRC32	`7734287F`
ssdeep	`24576:TX/DC7Vpa1T/6iCDE6tm3EjN17waE2ozUzXu1HPKbA/9SxjTy:TX/ua177CDwQMaE7zdPCA/URy`
PDB Path	G:\ç®å½\2025å·¥ä½ç«\ä¸»æ§å·¥ç¨\ä¸»æ§ä¿®å¤ä¸çº¿å\shellcode\æ³¨å¥èªèº«è¿ç¨\Release\æ³¨å¥èªèº«è¿ç¨.pdb
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) Generic_Malware_Zero - Generic Malware UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
No hosts contacted.

No Suricata Alerts

No Suricata TLS

Time & API	Arguments	Status	Return	Repeated
IsDebuggerPresent Feb. 3, 2025, 10:04 a.m.			0	0

pdb_path

resource name

None

section

{u'size_of_data': u'0x00088800', u'virtual_address': u'0x00058000', u'entropy': 7.405987481999306, u'name': u'.rsrc', u'virtual_size': u'0x000887d8'}

entropy

7.405987482

description

A section with a high entropy has been found

entropy

0.610738255034

description

Overall entropy of this PE file is high

Lionic	Trojan.Win32.Babar.4!c
Cynet	Malicious (score: 99)
CAT-QuickHeal	Trojan.Agent
Skyhigh	BehavesLike.Win32.SoftPulse.cc
ALYac	Gen:Variant.Fragtor.759960
Cylance	Unsafe
VIPRE	Gen:Variant.Fragtor.759960
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
BitDefender	Gen:Variant.Fragtor.759960
K7GW	Trojan ( 005c00a71 )
K7AntiVirus	Trojan ( 005c00a71 )
Arcabit	Trojan.Fragtor.DB9898
Symantec	ML.Attribute.HighConfidence
Elastic	Windows.Trojan.TwistedTinsel
ESET-NOD32	a variant of Win32/Agent.AHCE
APEX	Malicious
Avast	Win32:Agent-BDDR [Drp]
Kaspersky	HEUR:Trojan.Win32.Agentb.gen
Alibaba	Trojan:Win32/Multiverze.a70fec04
NANO-Antivirus	Trojan.Win32.Babar.kvlmgd
MicroWorld-eScan	Gen:Variant.Fragtor.759960
Rising	Trojan.Sabsik!8.128D4 (TFE:5:9u6a2PLrbiL)
Emsisoft	Gen:Variant.Fragtor.759960 (B)
F-Secure	Trojan.TR/Dropper.Gen
Zillya	Trojan.Agent.Win32.4128111
McAfeeD	ti!DE2660DCF64A
CTX	exe.trojan.generic
Sophos	Mal/Generic-S
SentinelOne	Static AI - Malicious PE
FireEye	Generic.mg.82575c3b5ffd6f4d
Webroot	Win.Trojan.Babar
Google	Detected
Avira	TR/Dropper.Gen
Antiy-AVL	GrayWare/Win32.Wacapew
Kingsoft	Win32.Trojan.Agentb.gen
Gridinsoft	Ransom.Win32.Wacatac.sa
Xcitium	Malware@#2zbq0xum1uwdn
Microsoft	Trojan:Win32/Multiverze
GData	Gen:Variant.Fragtor.759960
Varist	W32/ABTrojan.ZKLJ-8165
AhnLab-V3	Dropper/Win.Generic.R689797
McAfee	ACL/Babar Infostealer
DeepInstinct	MALICIOUS
VBA32	BScope.Trojan.Downloader
Malwarebytes	Malware.AI.1163237881
Ikarus	Trojan.Win32.Agent
Panda	Trj/Chgt.AD
Tencent	Malware.Win32.Gencirc.10c0a4c2
Yandex	Trojan.Agent!ut1/lfR1OZ8

25.exe