popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

y0u3d_003.exe

UPX PE32 PE File
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us March 26, 2025, 11:12 a.m. March 26, 2025, 11:25 a.m.
Size 1.2MB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 398ab46e27982dfd2028bf42f4832fa8
SHA256 033d584799e9ce55c7fc62adb86a6738a42fe2fa5f21035b66ee7b6c4c1fd6e1
CRC32 C66A1A87
ssdeep 24576:6egwtp24lYhcvTvUFWuqZ3Gb4gVJC158EsEYaQrQsJILVm9biGkbQjI/z:QQLl/442bYn9nY8mEGkb
Yara
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • UPX_Zero - UPX packed file

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section d0
section d1
section d2
section {u'size_of_data': u'0x00136c00', u'virtual_address': u'0x0014a000', u'entropy': 7.990074654621174, u'name': u'd2', u'virtual_size': u'0x00136a50'} entropy 7.99007465462 description A section with a high entropy has been found
entropy 0.997192137986 description Overall entropy of this PE file is high
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.BypassUAC.4!c
Cynet Malicious (score: 99)
CAT-QuickHeal Trojan.Ghanarava.1742817168832fa8
Skyhigh BehavesLike.Win32.Generic.tc
ALYac Gen:Trojan.Heur.nD0@tOdDrWni
Cylance Unsafe
VIPRE Gen:Trojan.Heur.nD0@tOdDrWni
Sangfor Trojan.Win32.Agent.Vl8u
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Gen:Trojan.Heur.nD0@tOdDrWni
K7GW Trojan ( 0059f91f1 )
K7AntiVirus Trojan ( 0059f91f1 )
Arcabit Trojan.Heur.EC8FB6
VirIT Trojan.Win32.Genus.XSJ
Symantec Trojan.Gen.MBT
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win32/Packed.VMProtect.BC suspicious
APEX Malicious
Avast Win32:MalwareX-gen [Trj]
Kaspersky Trojan.MSIL.BypassUAC.akz
NANO-Antivirus Trojan.Win32.BypassUAC.kwjnpx
MicroWorld-eScan Gen:Trojan.Heur.nD0@tOdDrWni
Rising Trojan.BypassUAC!8.EC23 (LESS:bWQ1Oq0FJ06W3JE9ck7pxt/gx3o)
Emsisoft Gen:Trojan.Heur.nD0@tOdDrWni (B)
F-Secure Trojan.TR/Crypt.XPACK.Gen
DrWeb Trojan.Inject5.13844
TrendMicro Trojan.Win32.AMADEY.YXFCXZ
McAfeeD ti!033D584799E9
Trapmine malicious.high.ml.score
CTX exe.trojan.bypassuac
Sophos Mal/Generic-S
SentinelOne Static AI - Malicious PE
FireEye Generic.mg.398ab46e27982dfd
Webroot Win.Trojan.Bypassuac
Google Detected
Avira TR/Crypt.XPACK.Gen
Antiy-AVL RiskWare[Packed]/Win32.VMProtect.a
Gridinsoft Trojan.Heur!.022520A1
Microsoft Trojan:Win32/Caynamer.A!ml
GData Gen:Trojan.Heur.nD0@tOdDrWni
Varist W32/ABTrojan.JMCI-4891
AhnLab-V3 Malware/Win.Crypt.R696482
McAfee Artemis!398AB46E2798
DeepInstinct MALICIOUS
VBA32 Malware-Cryptor.Inject.gen
Malwarebytes Malware.AI.3993337220
TrendMicro-HouseCall Trojan.Win32.AMADEY.YXFCXZ
Tencent Msil.Trojan.Bypassuac.Nzfl
Yandex Trojan.BypassUAC!8P91eGX0H40