valkyrie logo
valkyrie logo
  • Download Threat Hunter Assessment Tool
DASHBOARD
  • Unknown File Hunter Scans
STATISTICS
SETTINGS
  • Summary
  • Static Analysis
  • Dynamic Analysis
  • Precise Detectors
  • Human Expert Analysis
  • File Details
Analyzing...
File Name:   fe3658635c66bb8b0981fe3f73cebf1b229ed661
SHA1:   fe3658635c66bb8b0981fe3f73cebf1b229ed661
MD5:   a48de889c19197426214da54922eb7ad
First Seen Date:  2023-07-20 10:16:32.895832 ( 2023-07-20 10:16:32.895832 )
Number of Clients Seen:   5
Last Analysis Date:  2023-07-20 18:48:06.079029 ( 2023-07-20 18:48:06.079029 )
Human Expert Analysis Date:  2023-07-20 18:47:44.243530 ( 2023-07-20 18:47:44.243530 )
Human Expert Analysis Result:   Malware

Analysis Summary

Analysis Type Date Verdict
Signature Based Detection 2023-07-20 13:30:23.349849 Malware
Static Analysis Overall Verdict 2023-07-20 18:48:06.079029 No Threat Found help
Dynamic Analysis Overall Verdict 2023-07-20 18:48:06.079029 No Threat Found help
Precise Detectors Overall Verdict 2023-07-20 18:48:06.079029 No Match help
Human Expert Analysis Overall Verdict 2023-07-20 18:47:44.243530 Malware

Static Analysis

Static Analysis Overall Verdict Result
No Threat Found help
Detector Result
Optional Header LoaderFlags field is valued illegal Clean
Non-ascii or empty section names detected Clean
Illegal size of optional Header Clean
Packer detection on signature database Unknown help
Based on the sections entropy check! file is possibly packed Suspicious
Timestamp value suspicious Clean
Header Checksum is zero! Clean
Enrty point is outside the 1st(.code) section! Binary is possibly packed Clean
Optional Header NumberOfRvaAndSizes field is valued illegal Clean
Anti-vm present Clean
The Size Of Raw data is valued illegal! Binary might crash your disassembler/debugger Clean
TLS callback functions array detected Clean

Dynamic Analysis

Dynamic Analysis Overall Verdict Result
No Threat Found help
Suspicious Behaviors
Has no visible windows

fe3658635c66bb8b0981fe3f73cebf1b229ed661 tried to connect to some addresses pinned on the map below (click pins for more details):

Behavioral Information

LoadLibrary

kernel32.dll

QueryFilePath

C:\fe3658635c66bb8b0981fe3f73cebf1b229ed661

Precise Detectors Analysis Results

Detector Name Date Verdict Reason
Static Precise PUA Detector 1 2023-07-20 10:38:51.816608 No Match help NotDetected
Static Precise PUA Detector 4 2023-07-20 10:38:51.820997 No Match help NotDetected
Static Precise NI Detector 3 2023-07-20 10:38:51.943987 No Match help NotDetected
Static Precise PUA Detector 5 2023-07-20 10:38:51.957165 No Match help NotDetected
Static Precise Trojan Detector 1 2023-07-20 10:38:51.974315 No Match help NotDetected
Static Precise Trojan Detector 3 2023-07-20 10:38:51.958329 No Match help NotDetected
Static Precise PUA Detector 6 2023-07-20 10:38:52.003632 No Match help NotDetected
Static Precise Trojan Detector 12 2023-07-20 10:38:52.039648 No Match help NotDetected
Static Precise Virus Detector 1 2023-07-20 10:38:52.076424 No Match help NotDetected
Static Precise Virus Detector 2 2023-07-20 10:38:52.095466 No Match help NotDetected
Static Precise Trojan Detector 13 2023-07-20 10:38:52.137143 No Match help NotDetected
Static Precise PUA Detector 2 2023-07-20 10:38:52.145804 No Match help NotDetected

Advance Heuristics

No Advanced Heuristic Analysis Result Received

Detector Result

Human Expert Analysis Results

Analysis Start Date:   2023-07-20 11:36:47.147216 ( 2023-07-20 11:36:47.147216 )
Analysis End Date:  2023-07-20 18:47:44.243530 ( 2023-07-20 18:47:44.243530 )
File Upload Date:  2023-07-20 10:23:57.381502 ( 2023-07-20 10:23:57.381502 )
Update Date:  2023-07-20 18:48:05.829758 ( 2023-07-20 18:48:05.829758 )
Human Expert Analyst Feedback:  
Verdict:   Malware
Malware Family:  
Malware Type:   Trojan Generic

Additional File Information

Vendor Validation

Certificate Validation

PE Headers

Property Value

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy MD5

PE Imports

PE Exports

PE Resources

© Verdict Cloud, Xcitium, Inc. 2025. All rights reserved. v1.49.0-72-ENT
 
 
 
 
Loading...