Windows Analysis Report ouO9N7aFZl.exe

Overview

General Information

Sample Name: ouO9N7aFZl.exe
Analysis ID: 528753
MD5: 546d1e802d7c2e76569de1ec3c1e0a3b
SHA1: 6c85b22d9349c9937ec074f8df4aaf1f6232d395
SHA256: 06e57daff1fec75764f9c282cb99a09e9e33e07df95a8c0082647776fc6d336c
Tags: exe
Errors
  • No process behavior to analyse as no analysis process or sample was found
  • Corrupt sample or wrongly selected analyzer. Details: %1 is not a valid Win32 application.

Detection

Score: 48
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

Multi AV Scanner detection for submitted file
PE file overlay found
Uses 32bit PE files
PE file contains strange resources

Classification

AV Detection:

barindex
Multi AV Scanner detection for submitted file
Source: ouO9N7aFZl.exe Virustotal: Detection: 28% Perma Link

Compliance:

barindex
Uses 32bit PE files
Source: ouO9N7aFZl.exe Static PE information: LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, BYTES_REVERSED_LO, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, BYTES_REVERSED_HI

System Summary:

barindex
PE file overlay found
Source: ouO9N7aFZl.exe Static PE information: Data appended to the last section found
Uses 32bit PE files
Source: ouO9N7aFZl.exe Static PE information: LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, BYTES_REVERSED_LO, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, BYTES_REVERSED_HI
PE file contains strange resources
Source: ouO9N7aFZl.exe Static PE information: Resource name: RT_BITMAP type: GLS_BINARY_LSB_FIRST
Source: ouO9N7aFZl.exe Virustotal: Detection: 28%
Source: classification engine Classification label: mal48.winEXE@0/0@0/0

No Screenshots

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 signatures2 2 Behavior Graph ID: 528753 Sample: ouO9N7aFZl.exe Startdate: 25/11/2021 Architecture: WINDOWS Score: 48 5 Multi AV Scanner detection for submitted file 2->5
No contacted IP infos