Windows Analysis Report
file.exe

Overview

General Information

Sample Name: file.exe
Analysis ID: 780213
MD5: c7ec81f0acc9c8e034bc2d512942d044
SHA1: 2cf635fcefa8db2f78e522634c5eb30bae2bd96e
SHA256: b4bbed50c840856520738aeb28649e34d9b017761d679530f7aaa3eb9340d0c1
Tags: exe
Errors
  • No process behavior to analyse as no analysis process or sample was found
  • Corrupt sample or wrongly selected analyzer. Details: C000007B

Detection

Score: 48
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

Multi AV Scanner detection for submitted file
PE file overlay found
Uses 32bit PE files
PE file contains an invalid checksum

Classification

AV Detection
barindex
Multi AV Scanner detection for submitted file
Source: file.exe ReversingLabs: Detection: 21%
Uses 32bit PE files
Source: file.exe Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE
Source: Binary string: C:\suvi-rak\juha\vinogugifi99-ficeviwojewel buwet lugemuvujaye.pdb source: file.exe
PE file overlay found
Source: file.exe Static PE information: Data appended to the last section found
Uses 32bit PE files
Source: file.exe Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE
Source: file.exe ReversingLabs: Detection: 21%
Source: file.exe Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: classification engine Classification label: mal48.winEXE@0/0@0/0
Source: file.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: Binary string: C:\suvi-rak\juha\vinogugifi99-ficeviwojewel buwet lugemuvujaye.pdb source: file.exe
PE file contains an invalid checksum
Source: file.exe Static PE information: real checksum: 0x44899 should be: 0x24602

No Screenshots

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 signatures2 2 Behavior Graph ID: 780213 Sample: file.exe Startdate: 08/01/2023 Architecture: WINDOWS Score: 48 5 Multi AV Scanner detection for submitted file 2->5
⊘No contacted IP infos