|
Analyzing...
|
File Name: DriverPack-17-Online_903364983.1505480122.exe
SHA1: 332c6d7a41782059a0ce7bb28047a76f91b34a98
MD5: 8cf070e06d243b0966fed6bb24c955b2
First Seen Date: 2017-09-16 00:25:57.489669 ( )
Number of Clients Seen: 6
Last Analysis Date: 2019-07-22 10:08:42.946858 ( )
Human Expert Analysis Date: 2019-07-22 09:35:33.254986 ( )Human Expert Analysis Result: PUA
Analysis Summary
| Analysis Type | Date | Verdict | |
|---|---|---|---|
| Signature Based Detection | 2018-11-05 13:38:24.190817 | Malware | |
| Static Analysis Overall Verdict | 2019-07-22 10:08:42.946858 | No Threat Found | help |
| Precise Detectors Overall Verdict | 2019-07-22 10:08:42.946858 | No Match | help |
| Human Expert Analysis Overall Verdict | 2019-07-22 09:35:33.254986 | PUA | |
Static Analysis
| Static Analysis Overall Verdict | Result |
|---|---|
| No Threat Found | help |
| Detector | Result | |
|---|---|---|
| Optional Header LoaderFlags field is valued illegal | Clean | |
| Non-ascii or empty section names detected | Clean | |
| Illegal size of optional Header | Clean | |
| Packer detection on signature database | Unknown | help |
| Based on the sections entropy check! file is possibly packed | Clean | |
| Timestamp value suspicious | Clean | |
| Header Checksum is zero! | Clean | |
| Enrty point is outside the 1st(.code) section! Binary is possibly packed | Clean | |
| Optional Header NumberOfRvaAndSizes field is valued illegal | Clean | |
| Anti-vm present | Suspicious | |
| The Size Of Raw data is valued illegal! Binary might crash your disassembler/debugger | Clean | |
| TLS callback functions array detected | Clean | |
Packer detection on signature database
Armadillo v1.71
Microsoft Visual C++ v5.0/v6.0 (MFC)
Microsoft Visual C++
Dynamic Analysis
No Dynamic Analysis Result Received
Behavioral Information is not Available
Precise Detectors Analysis Results
| Detector Name | Date | Verdict | Reason | |
|---|---|---|---|---|
| Static Precise PUA Detector 1 | 2018-03-02 12:59:19.643927 | No Match | help | NotDetected |
| Static Precise Virus Detector | 2018-03-02 12:59:19.661760 | No Match | help | NotDetected |
| Static Precise Trojan Detector | 2018-03-02 12:59:19.661579 | No Match | help | NotDetected |
| Static Precise Adware InstallCore Detector 1 | 2018-03-02 12:59:19.686270 | No Match | help | NotDetected |
| Static Precise Trojan Detector 2 | 2018-03-02 12:59:19.661561 | No Match | help | NotDetected |
| Static Precise Trojan Detector 3 | 2018-03-02 12:59:19.684943 | No Match | help | NotDetected |
| Static Precise Trojan Generic Cryptor Detector 1 | 2018-03-02 12:59:19.682852 | No Match | help | NotDetected |
| Static Precise Virus Detector 2 | 2018-03-02 12:59:19.673445 | No Match | help | NotDetected |
Advance Heuristics
No Advanced Heuristic Analysis Result Received
Human Expert Analysis Results
Analysis Start Date: 2019-07-22 06:21:43.717503 ( )
Analysis End Date: 2019-07-22 09:35:33.254986 ( )
File Upload Date: 2019-07-20 00:44:21.985246 ( )
Update Date: 2019-07-22 10:08:40.476584 ( )
Human Expert Analyst Feedback:
Verdict: PUA
Malware Family:
Additional File Information
| Property | Value |
|---|
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | MD5 |
|---|