popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

WmP4vZj.exe

Generic Malware Malicious Library UPX PE64 PE File OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 April 8, 2025, 9:13 a.m. April 8, 2025, 9:17 a.m.
Size 5.4MB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 f260c734b1fd66443de91cb53a857b5b
SHA256 2eb9c409c7aacc8efc7ed4e96964d378c1237d7941b154cae74d99789f9a38b4
CRC32 0A3D9511
ssdeep 98304:DO0hSVQ/0+JgGxdFKoUlecDNkjSTwP1bifCclLZsFC+gJ6j/7UC541SFNcx8:68Sa/0JYdFR8DNMSsBXONm3UZYI2
Yara
  • PE_Header_Zero - PE File Signature
  • Malicious_Library_Zero - Malicious_Library
  • IsPE64 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check
  • UPX_Zero - UPX packed file

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section .BSS
section .gxfg
section .retplne
section _RDATA
section .cSs
Time & API Arguments Status Return Repeated

__exception__

 stacktrace: 
wmp4vzj+0x2b177 @ 0x13ff8b177
wmp4vzj+0xfac7 @ 0x13ff6fac7
wmp4vzj+0x22d2d @ 0x13ff82d2d
wmp4vzj+0x2991e @ 0x13ff8991e
BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76c2652d
RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x76d5c521

exception.instruction_r: 44 0f b7 01 44 2b c0 75 19 48 2b ca 66 85 c0 74
exception.symbol: wmp4vzj+0x2b177
exception.instruction: movzx r8d, word ptr [rcx]
exception.module: WmP4vZj.exe
exception.exception_code: 0xc0000005
exception.offset: 176503
exception.address: 0x13ff8b177
registers.r14: 0
registers.r15: 0
registers.rcx: 110
registers.rsi: 0
registers.r10: -72340172838076928
registers.rbx: 0
registers.rsp: 7535184
registers.r11: 0
registers.r8: 1994794592
registers.r9: 0
registers.rdx: 5368327134
registers.r12: 0
registers.rbp: 0
registers.rdi: 0
registers.rax: 75
registers.r13: 0
1 0 0
section {u'size_of_data': u'0x0003a800', u'virtual_address': u'0x00001000', u'entropy': 6.988471115891725, u'name': u'.text', u'virtual_size': u'0x0003a6ea'} entropy 6.98847111589 description A section with a high entropy has been found
section {u'size_of_data': u'0x0050f200', u'virtual_address': u'0x00054000', u'entropy': 7.999959697332181, u'name': u'.cSs', u'virtual_size': u'0x0050f028'} entropy 7.99995969733 description A section with a high entropy has been found
entropy 0.987686975556 description Overall entropy of this PE file is high
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.Generic.4!c
Cynet Malicious (score: 100)
CAT-QuickHeal Trojan.Ghanarava.1744052864857b5b
Cylance Unsafe
Sangfor Trojan.Win64.Kryptik.Vkn9
CrowdStrike win/malicious_confidence_100% (W)
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win64/Kryptik.EZV
APEX Malicious
Avast Win64:CrypterX-gen [Trj]
Kaspersky UDS:DangerousObject.Multi.Generic
Rising Trojan.ShellCodeLoader!1.12B08 (CLASSIC)
McAfeeD ti!2EB9C409C7AA
CTX exe.trojan.kryptik
Sophos Mal/Generic-S
SentinelOne Static AI - Suspicious PE
FireEye Generic.mg.f260c734b1fd6644
Webroot W32.Trojan.Gen
Google Detected
Antiy-AVL Trojan/Win64.Kryptik
Kingsoft malware.kb.a.998
Gridinsoft Ransom.Win64.TrickBot.sa
Microsoft Trojan:Win64/LummaC.AN!MTB
Varist W64/ABTrojan.WJTA-0400
AhnLab-V3 Trojan/Win.Kryptik.R699262
DeepInstinct MALICIOUS
Malwarebytes Crypt.Trojan.MSIL.DDS
Panda Trj/GdSda.A
TrendMicro-HouseCall Trojan.Win32.VSX.PE04C9V
MaxSecure Trojan.Malware.300983.susgen
Fortinet W64/Kryptik.EZV!tr
AVG Win64:CrypterX-gen [Trj]
Paloalto generic.ml
alibabacloud Trojan:Win/LummaC.AT8PHU