popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

new_image.jpg.dll

North Korea Malicious Library UPX Malicious Packer OS Processor Check .NET DLL PE File DLL PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 March 31, 2025, 6:17 p.m. March 31, 2025, 6:17 p.m.
Size 3.5MB
Type PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 c308a9d1c6d5328c8ee007303770eda7
SHA256 c3de728850dc1e777ad50a211a4be212ca6c4ac9d94bf7bb6d5f7fe5f4574021
CRC32 F16D6CB4
ssdeep 24576:EoXsKojcmcRHfrZeSWVLXsomhToj3c8rF5Zvq2/VihBuvUHpTGDknWev7jz+fdT+:EghtfrZefVooETozcF0whBuh1Oz
Yara
  • PE_Header_Zero - PE File Signature
  • Malicious_Library_Zero - Malicious_Library
  • IsDLL - (no description)
  • NorthKorea_Zero - Maybe it's North Korea File
  • IsPE32 - (no description)
  • Malicious_Packer_Zero - Malicious Packer
  • OS_Processor_Check_Zero - OS Processor Check
  • UPX_Zero - UPX packed file
  • Is_DotNET_DLL - (no description)

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Elastic malicious (high confidence)
ESET-NOD32 a variant of MSIL/Injector.FPT
Avast Win32:MalwareX-gen [Trj]
ClamAV Win.Packed.Trojanx-9818175-0
Alibaba Trojan:MSIL/Injector.d6d4f2e0
F-Secure Trojan.TR/Injector.lsdcl
DrWeb Trojan.InjectNET.14
McAfeeD ti!C3DE728850DC
SentinelOne Static AI - Suspicious PE
Google Detected
Avira TR/Injector.lsdcl
GData Win32.Trojan.Agent.5A06GF
Varist W32/MSIL_Troj.C.gen!Eldorado
AhnLab-V3 Trojan/Win.Generic.C5690791
McAfee Artemis!C308A9D1C6D5
huorong Trojan/MSIL.Injector.lg
Fortinet MSIL/FPT!tr
AVG Win32:MalwareX-gen [Trj]
alibabacloud Trojan:Win/Injector.KDI