popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

16.exe

Generic Malware Malicious Library UPX PE File OS Processor Check PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us Feb. 3, 2025, 10:05 a.m. Feb. 3, 2025, 10:13 a.m.
Size 990.2KB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 04b5aaf415d009730bc16cab6805ba77
SHA256 a53d2a6a5a55f0d7262c48ad31c6c43a4d17946bb0049f09847c5e7ae08d4e77
CRC32 97688E73
ssdeep 12288:RoA/DC7VtVyUHa1TQuI1OynIWi/JL+CgY967WjPfTH0pYx/6IOZtGiy6g/L104:RX/DC7Vpa1T/q/iFaxU3bwFqjTy4
PDB Path G:\目录\2025工作站\主控工程\主控修复上线包\shellcode\注入自身进程\Release\注入自身进程.pdb
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

IsDebuggerPresent

 0 0
pdb_path G:\目录\2025工作站\主控工程\主控修复上线包\shellcode\注入自身进程\Release\注入自身进程.pdb
resource name None
name RT_DIALOG language LANG_CHINESE filetype data sublanguage SUBLANG_CHINESE_SIMPLIFIED offset 0x00088ff0 size 0x00000040
name RT_DIALOG language LANG_CHINESE filetype data sublanguage SUBLANG_CHINESE_SIMPLIFIED offset 0x00088ff0 size 0x00000040
name RT_DIALOG language LANG_CHINESE filetype data sublanguage SUBLANG_CHINESE_SIMPLIFIED offset 0x00088ff0 size 0x00000040
section {u'size_of_data': u'0x0009ea00', u'virtual_address': u'0x00058000', u'entropy': 7.510976260539237, u'name': u'.rsrc', u'virtual_size': u'0x0009e854'} entropy 7.51097626054 description A section with a high entropy has been found
entropy 0.645801526718 description Overall entropy of this PE file is high
Lionic Trojan.Win32.Agentb.X!c
Cynet Malicious (score: 99)
CAT-QuickHeal Trojan.Exnet
Skyhigh Artemis!Trojan
ALYac Gen:Variant.Jaik.263476
Cylance Unsafe
VIPRE Gen:Variant.Jaik.263476
Sangfor Trojan.Win32.Agent.Ap8i
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Gen:Variant.Jaik.263476
K7GW Trojan ( 005c00a71 )
K7AntiVirus Trojan ( 005c00a71 )
Arcabit Trojan.Jaik.D40534
Symantec ML.Attribute.HighConfidence
Elastic Windows.Trojan.TwistedTinsel
ESET-NOD32 a variant of Win32/Agent.AHCE
Avast Win32:Agent-BDDR [Drp]
Kaspersky HEUR:Trojan.Win32.Agentb.gen
Alibaba Trojan:Win32/Generic.d984311f
NANO-Antivirus Trojan.Win32.Babar.kvlmgd
MicroWorld-eScan Gen:Variant.Jaik.263476
Rising Trojan.Sabsik!8.128D4 (TFE:5:9u6a2PLrbiL)
Emsisoft Gen:Variant.Jaik.263476 (B)
F-Secure Trojan.TR/Agent.hcnhx
Zillya Trojan.Agent.Win32.4128111
McAfeeD ti!A53D2A6A5A55
CTX exe.trojan.generic
Sophos Mal/Generic-S
SentinelOne Static AI - Malicious PE
FireEye Generic.mg.04b5aaf415d00973
Webroot W32.Trojan.Gen
Google Detected
Avira TR/Agent.hcnhx
Antiy-AVL GrayWare/Win32.Wacapew
Kingsoft Win32.Trojan.Agentb.gen
Xcitium Malware@#2og5duuddfv70
Microsoft Trojan:Win32/Wacatac.B!ml
GData Gen:Variant.Jaik.263476
Varist W32/ABTrojan.XHTZ-5567
AhnLab-V3 Dropper/Win.Generic.R689899
McAfee Artemis!04B5AAF415D0
DeepInstinct MALICIOUS
VBA32 BScope.Trojan.Downloader
Malwarebytes Malware.AI.1163237881
Ikarus Trojan.Win32.Agent
Panda Trj/Agent.ASH
TrendMicro-HouseCall TROJ_GEN.R002H09AO25
Tencent Malware.Win32.Gencirc.10c0a4c2
Yandex Trojan.Agent!ut1/lfR1OZ8
MaxSecure Trojan.Malware.324702022.susgen