1.2
低危

314e930ffd26fea3bf07ead6a44f4a1ded4d353ed5c6cdeb7b634efcbae0e563

e130caf049c399c4322fc392dc44b108.exe

分析耗时

94s

最近分析

文件大小

88.0KB
静态报毒 动态报毒 AGUA AI SCORE=86 AIDETECTVM BLQZV CONFIDENCE CVEK5ERENJW ENAN FAREIT FM0@AMLAJAPI GDSDA GENERICKD GULOADER HIGH CONFIDENCE HSCONA JRFYIIAZYMN MALWARE1 R011C0WHH20 SCORE SKEEYAH TROJANX UNCLASSIFIEDMALWARE@0 UNSAFE VBCRYPTOR VEBZENPAK ZEVBAF 更多
鹰眼引擎
未检测 暂无鹰眼引擎检测结果
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
McAfee Fareit-FXW!E130CAF049C3 20200910 6.0.6.653
Alibaba Trojan:Win32/Vebzenpak.afed5de5 20190527 0.3.0.5
Baidu 20190318 1.0.0.2
Avast Win32:TrojanX-gen [Trj] 20200910 18.4.3895.0
Tencent Win32.Trojan.Vebzenpak.Agua 20200910 1.0.0.1
Kingsoft 20200910 2013.8.14.323
CrowdStrike win/malicious_confidence_60% (W) 20190702 1.0
静态指标
行为判定
动态指标
网络通信
File has been identified by 52 AntiVirus engines on VirusTotal as malicious (50 out of 52 个事件)
Bkav W32.AIDetectVM.malware1
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.34364521
FireEye Generic.mg.e130caf049c399c4
CAT-QuickHeal Trojan.Vebzenpak
McAfee Fareit-FXW!E130CAF049C3
Cylance Unsafe
Zillya Trojan.Injector.Win32.765436
Sangfor Malware
K7AntiVirus Riskware ( 0040eff71 )
Alibaba Trojan:Win32/Vebzenpak.afed5de5
K7GW Riskware ( 0040eff71 )
Cybereason malicious.498c54
Arcabit Trojan.Generic.D20C5C69
TrendMicro TROJ_GEN.R011C0WHH20
Symantec Trojan Horse
APEX Malicious
Avast Win32:TrojanX-gen [Trj]
Kaspersky Trojan.Win32.Vebzenpak.zdm
BitDefender Trojan.GenericKD.34364521
NANO-Antivirus Trojan.Win32.Vebzenpak.hscona
ViRobot Trojan.Win32.S.Guloader.90112.G
Tencent Win32.Trojan.Vebzenpak.Agua
Ad-Aware Trojan.GenericKD.34364521
TACHYON Trojan/W32.VB-Vebzenpak.90112.AR
Comodo .UnclassifiedMalware@0
VIPRE Trojan.Win32.Generic!BT
Invincea Mal/Generic-S
Sophos Mal/Generic-S
Jiangmin Trojan.Vebzenpak.hin
eGambit Unsafe.AI_Score_62%
Avira TR/AD.VBCryptor.blqzv
Antiy-AVL Trojan/Win32.Vebzenpak
Microsoft Trojan:Win32/Skeeyah!MSR
ZoneAlarm Trojan.Win32.Vebzenpak.zdm
GData Trojan.GenericKD.34364521
Cynet Malicious (score: 85)
BitDefenderTheta Gen:NN.ZevbaF.34216.fm0@amlajapi
ALYac Trojan.GenericKD.34364521
MAX malware (ai score=86)
VBA32 Trojan.Vebzenpak
Malwarebytes Trojan.VBCrypt
ESET-NOD32 a variant of Win32/Injector.ENAN
TrendMicro-HouseCall TROJ_GEN.R011C0WHH20
Rising Trojan.Vebzenpak!8.11687 (TFE:5:JRfYIIAZYMN)
Yandex Trojan.Injector!cVeK5EreNJw
Ikarus Trojan.VBCryptor
Fortinet W32/Vebzenpak.ZDM!tr
AVG Win32:TrojanX-gen [Trj]
Panda Trj/GdSda.A
可视化分析
二进制图像
暂无二进制图像 该样本未生成二进制可视化图像
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2014-05-04 01:08:19

Imports

Library MSVBVM60.DLL:
0x401000
0x401004
0x401008 MethCallEngine
0x40100c
0x401010
0x401014
0x401018
0x40101c
0x401020
0x401024
0x401028
0x40102c
0x401030
0x401034 EVENT_SINK_AddRef
0x401038
0x40103c
0x401040
0x401044
0x401048
0x40104c EVENT_SINK_Release
0x401050
0x401058 __vbaExceptHandler
0x40105c
0x401060
0x401064
0x401068
0x40106c ProcCallEngine
0x401070
0x401074
0x401078
0x40107c
0x401080
0x401084
0x401088
0x40108c
0x401090
0x401094

Hosts

No hosts contacted.

DNS

No domains contacted.

TCP

No TCP connections recorded.

UDP

No UDP connections recorded.

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.