popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

eZp5zCz.exe

Generic Malware Malicious Library UPX PE64 PE File OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us April 21, 2025, 5:45 p.m. April 21, 2025, 5:47 p.m.
Size 1006.5KB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 1fc27b282f32c078dd2dfcdcc7696236
SHA256 7ed131e9cf7d7f87b0c7e95e121025f35f526c927e8dda59196c9022870193b1
CRC32 605CCEA2
ssdeep 24576:MPIt+AtP8o1BZyiCZvr3O8KsewWkprcLhlxhX6F/FhlxhX6F/k:8s518Jr3BrcNB6ZB62
Yara
  • PE_Header_Zero - PE File Signature
  • Malicious_Library_Zero - Malicious_Library
  • IsPE64 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check
  • UPX_Zero - UPX packed file

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section .B1
section .gxfg
section .retplne
section _RDATA
section .jss
Time & API Arguments Status Return Repeated

__exception__

 stacktrace: 
ezp5zcz+0x84c73 @ 0x13fe64c73
ezp5zcz+0x9942 @ 0x13fde9942
ezp5zcz+0x16f67 @ 0x13fdf6f67
BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d
RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521

exception.instruction_r: 44 0f b7 01 44 2b c0 75 19 48 2b ca 66 85 c0 74
exception.symbol: ezp5zcz+0x84c73
exception.instruction: movzx r8d, word ptr [rcx]
exception.module: eZp5zCz.exe
exception.exception_code: 0xc0000005
exception.offset: 543859
exception.address: 0x13fe64c73
registers.r14: 0
registers.r15: 0
registers.rcx: 110
registers.rsi: 0
registers.r10: -72340172838076673
registers.rbx: 0
registers.rsp: 7208480
registers.r11: -9187201950435737472
registers.r8: 0
registers.r9: -72340170901133011
registers.rdx: 5367150084
registers.r12: 0
registers.rbp: 0
registers.rdi: 0
registers.rax: 75
registers.r13: 0
1 0 0
section {u'size_of_data': u'0x00099a00', u'virtual_address': u'0x00001000', u'entropy': 7.00899749984612, u'name': u'.text', u'virtual_size': u'0x00099806'} entropy 7.00899749985 description A section with a high entropy has been found
section {u'size_of_data': u'0x00001e00', u'virtual_address': u'0x000b2000', u'entropy': 6.953661113870911, u'name': u'.B1', u'virtual_size': u'0x00001d4a'} entropy 6.95366111387 description A section with a high entropy has been found
section {u'size_of_data': u'0x00024c00', u'virtual_address': u'0x000ba000', u'entropy': 7.9988401113508205, u'name': u'.jss', u'virtual_size': u'0x00024c00'} entropy 7.99884011135 description A section with a high entropy has been found
section {u'size_of_data': u'0x00024c00', u'virtual_address': u'0x000df000', u'entropy': 7.9988401113508205, u'name': u'.jss', u'virtual_size': u'0x00024c00'} entropy 7.99884011135 description A section with a high entropy has been found
entropy 0.911896465903 description Overall entropy of this PE file is high