popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

35.exe

Generic Malware Malicious Library UPX PE File OS Processor Check PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us Feb. 3, 2025, 10:06 a.m. Feb. 3, 2025, 10:21 a.m.
Size 1.0MB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 076f846121b6425db3e0bbf670ac0e7d
SHA256 cce443e59e62b2349c3f4ce61ab7598adc5656f86cb3e39ba0c767724d1e171e
CRC32 D2796364
ssdeep 24576:1X/DC7Vpa1T/7apuJJe2PDMIMxdAEDOOHVHCATTyW:1X/ua17UuneazMvrOIH5yW
PDB Path G:\目录\2025工作站\主控工程\主控修复上线包\shellcode\注入自身进程\Release\注入自身进程.pdb
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

IsDebuggerPresent

 0 0
pdb_path G:\目录\2025工作站\主控工程\主控修复上线包\shellcode\注入自身进程\Release\注入自身进程.pdb
resource name None
section {u'size_of_data': u'0x000a7e00', u'virtual_address': u'0x00058000', u'entropy': 7.775603793703493, u'name': u'.rsrc', u'virtual_size': u'0x000a7c1c'} entropy 7.7756037937 description A section with a high entropy has been found
entropy 0.658656204022 description Overall entropy of this PE file is high
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.Agentb.X!c
Cynet Malicious (score: 99)
CAT-QuickHeal Trojan.Ghanarava.1738507411ac0e7d
Skyhigh Artemis!Trojan
ALYac Gen:Variant.Fragtor.760966
Cylance Unsafe
VIPRE Gen:Variant.Fragtor.760966
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Gen:Variant.Fragtor.760966
K7GW Trojan ( 005c00a71 )
K7AntiVirus Trojan ( 005c00a71 )
Arcabit Trojan.Fragtor.DB9C86
Symantec ML.Attribute.HighConfidence
Elastic Windows.Trojan.TwistedTinsel
ESET-NOD32 a variant of Win32/Agent.AHCE
Avast Win32:Agent-BDDR [Drp]
Kaspersky HEUR:Trojan.Win32.Agentb.gen
Alibaba Trojan:Win32/Generic.9227a85c
NANO-Antivirus Trojan.Win32.Babar.kvlmek
MicroWorld-eScan Gen:Variant.Fragtor.760966
Rising Trojan.Sabsik!8.128D4 (TFE:5:9u6a2PLrbiL)
Emsisoft Gen:Variant.Fragtor.760966 (B)
F-Secure Trojan.TR/Dropper.Gen
Zillya Trojan.Agent.Win32.4128111
McAfeeD ti!CCE443E59E62
CTX exe.trojan.generic
Sophos Mal/Generic-S
SentinelOne Static AI - Suspicious PE
FireEye Generic.mg.076f846121b6425d
Webroot Win.Trojan.Babar
Google Detected
Avira TR/Dropper.Gen
Antiy-AVL GrayWare/Win32.Wacapew
Kingsoft Win32.Trojan.Agentb.gen
Gridinsoft Ransom.Win32.Wacatac.sa
Microsoft Trojan:Win32/Multiverze
GData Gen:Variant.Fragtor.760966
Varist W32/ABTrojan.FFAO-6739
AhnLab-V3 Dropper/Win.Generic.R689899
McAfee Artemis!076F846121B6
DeepInstinct MALICIOUS
VBA32 BScope.Trojan.Downloader
Malwarebytes Malware.AI.1163237881
Ikarus Trojan.Win32.Agent
Panda Trj/Chgt.AD
TrendMicro-HouseCall TROJ_GEN.R002H09AO25
Tencent Malware.Win32.Gencirc.10c0a4c2
Yandex Trojan.Agent!ut1/lfR1OZ8