popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

42.exe

Generic Malware Malicious Library UPX PE File OS Processor Check PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Feb. 3, 2025, 10:06 a.m. Feb. 3, 2025, 10:09 a.m.
Size 1.1MB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 723fa883af9333610ece38b0300a87e8
SHA256 6aeabc38e658ccaf1e244a0330b7a80a2194845e33c04c7d4fa4d7c5991ea048
CRC32 690FE568
ssdeep 24576:zX/DC7Vpa1T/Z21XkB3Fm6Em/0ByCclTy/9X6:zX/ua17Uyvm6dyCZyM
PDB Path G:\目录\2025工作站\主控工程\主控修复上线包\shellcode\注入自身进程\Release\注入自身进程.pdb
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

IsDebuggerPresent

 0 0
pdb_path G:\目录\2025工作站\主控工程\主控修复上线包\shellcode\注入自身进程\Release\注入自身进程.pdb
resource name None
name RT_STRING language LANG_CHINESE filetype data sublanguage SUBLANG_CHINESE_SIMPLIFIED offset 0x0009fcf4 size 0x000000d8
section {u'size_of_data': u'0x000b4800', u'virtual_address': u'0x00058000', u'entropy': 7.061783372020225, u'name': u'.rsrc', u'virtual_size': u'0x000b4754'} entropy 7.06178337202 description A section with a high entropy has been found
entropy 0.67476635514 description Overall entropy of this PE file is high
Lionic Trojan.Win32.Babar.4!c
Cynet Malicious (score: 99)
CAT-QuickHeal Trojan.Multi
Skyhigh Artemis!Trojan
ALYac Gen:Variant.Jaik.263476
Cylance Unsafe
VIPRE Gen:Variant.Jaik.263476
Sangfor Trojan.Win32.Agent.Axl9
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Gen:Variant.Jaik.263476
K7GW Trojan ( 005c00a71 )
K7AntiVirus Trojan ( 005c00a71 )
Arcabit Trojan.Jaik.D40534
Symantec ML.Attribute.HighConfidence
Elastic Windows.Trojan.TwistedTinsel
ESET-NOD32 a variant of Win32/Agent.AHCE
Avast Win32:Agent-BDDR [Drp]
Kaspersky HEUR:Trojan.Win32.Agentb.gen
Alibaba Trojan:Win32/Generic.e13abae1
NANO-Antivirus Trojan.Win32.Babar.kvlmgd
MicroWorld-eScan Gen:Variant.Jaik.263476
Rising Trojan.Sabsik!8.128D4 (TFE:5:9u6a2PLrbiL)
Emsisoft Gen:Variant.Jaik.263476 (B)
F-Secure Trojan.TR/Agent.hzhsr
Zillya Trojan.Agent.Win32.4128111
McAfeeD ti!6AEABC38E658
CTX exe.trojan.generic
Sophos Mal/Generic-S
SentinelOne Static AI - Suspicious PE
FireEye Generic.mg.723fa883af933361
Webroot Win.Trojan.Babar
Google Detected
Avira TR/Agent.hzhsr
Antiy-AVL GrayWare/Win32.Wacapew
Kingsoft Win32.Trojan.Agentb.gen
Gridinsoft Ransom.Win32.Wacatac.sa
Xcitium Malware@#10umbeoyggg6o
Microsoft Trojan:Win32/Wacatac.B!ml
GData Gen:Variant.Jaik.263476
Varist W32/ABTrojan.QBAU-1529
AhnLab-V3 Dropper/Win.Generic.R689899
McAfee Artemis!723FA883AF93
DeepInstinct MALICIOUS
VBA32 BScope.Trojan.Downloader
Malwarebytes Malware.AI.1163237881
Ikarus Trojan.Win32.Agent
Panda Trj/Agent.ASH
TrendMicro-HouseCall TROJ_GEN.R002H09AO25
Tencent Malware.Win32.Gencirc.10c0a4c2
Yandex Trojan.Agent!ut1/lfR1OZ8