popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

untippedhi.exe

Generic Malware Malicious Library ASPack UPX PE File OS Processor Check PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us April 26, 2025, 2:20 p.m. April 26, 2025, 2:22 p.m.
Size 231.0KB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 1452d6a3ec8d69b0b331bc751e9c117b
SHA256 eed8806090ae11e888fceb18bb633068a6cab9aeac590c10fb2d4b74e0251d84
CRC32 A81B16C4
ssdeep 3072:BNwCrquaP24/h7Q22oWvjWn+V4t4jrv34CovCWcKqp0re5OkOYg7SCv:/UhAoAZoLiVCv
Yara
  • PE_Header_Zero - PE File Signature
  • ASPack_Zero - ASPack packed file
  • Malicious_Library_Zero - Malicious_Library
  • IsPE32 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check
  • UPX_Zero - UPX packed file

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

GetComputerNameW

 computer_name: TEST22-PC
1 1 0
Time & API Arguments Status Return Repeated

GlobalMemoryStatusEx

 1 1 0
Time & API Arguments Status Return Repeated

NtAllocateVirtualMemory

 process_identifier: 1256
region_size: 53248
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x002f0000
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
process_handle: 0xffffffff
1 0 0
file C:\Users\test22\AppData\Roaming\Jaxx\Local Storage\wallet.dat
file C:\Windows\System32\VBoxService.exe
Bkav W32.AIDetectMalware
Cynet Malicious (score: 100)
CAT-QuickHeal Trojan.Injuke
ALYac Gen:Variant.Lazy.484341
Cylance Unsafe
VIPRE Gen:Variant.Lazy.484341
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Gen:Variant.Lazy.484341
K7GW Trojan ( 005c55441 )
K7AntiVirus Trojan ( 005c55441 )
Arcabit Trojan.Lazy.D763F5
VirIT Trojan.Win32.GenusC.HZU
Symantec ML.Attribute.HighConfidence
Elastic Windows.Generic.Threat
ESET-NOD32 a variant of Win32/GenKryptik.FMVX
APEX Malicious
Avast Win32:Evo-gen [Trj]
Kaspersky HEUR:Trojan.Win32.Injuke.gen
Alibaba Trojan:Win32/Azorult.aaf0e6f1
NANO-Antivirus Trojan.Win32.Injuke.kwajxa
MicroWorld-eScan Gen:Variant.Lazy.484341
Rising Trojan.Kryptik!8.8 (TFE:5:24ym6yZErqO)
Emsisoft Gen:Variant.Lazy.484341 (B)
F-Secure Heuristic.HEUR/AGEN.1317648
DrWeb Trojan.PWS.Stealer.40606
Zillya Trojan.GenKryptik.Win32.1087218
TrendMicro Trojan.Win32.KOILOADER.YXFDWZ
McAfeeD Real Protect-LS!1452D6A3EC8D
CTX exe.trojan.generic
Sophos Troj/Krypt-AKG
SentinelOne Static AI - Malicious PE
Webroot Win.Trojan.Gen
Google Detected
Avira HEUR/AGEN.1317648
Antiy-AVL Trojan/Win32.GenKryptik
Kingsoft malware.kb.a.936
Gridinsoft Ransom.Win32.AzorUlt.sa
Microsoft Trojan:Win32/Azorult.C!MTB
ViRobot Trojan.Win.Z.Lazy.236544.I
ZoneAlarm Troj/Krypt-AKG
GData Gen:Variant.Lazy.484341
Varist W32/ABTrojan.HAUG-8844
AhnLab-V3 Trojan/Win.Generic.R695113
McAfee Artemis!1452D6A3EC8D
DeepInstinct MALICIOUS
VBA32 BScope.Trojan.Sabsik.FL
Malwarebytes Trojan.KoiLoader
Ikarus Trojan.Win32.Krypt
Panda Trj/GdSda.A