Category | Machine | Started | Completed |
---|---|---|---|
FILE | s1_win7_x6401 | Sept. 1, 2023, 9:14 a.m. | Sept. 1, 2023, 9:17 a.m. |
-
d4360699.exe "C:\Users\test22\AppData\Local\Temp\d4360699.exe"
2548
Name | Response | Post-Analysis Lookup |
---|---|---|
No hosts contacted. |
IP Address | Status | Action |
---|---|---|
No hosts contacted. |
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
name | RT_ICON | language | LANG_SAAMI | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_ARABIC_TUNISIA | offset | 0x00f98128 | size | 0x00000468 | ||||||||||||||||||
name | RT_ICON | language | LANG_SAAMI | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_ARABIC_TUNISIA | offset | 0x00f98128 | size | 0x00000468 | ||||||||||||||||||
name | RT_ICON | language | LANG_SAAMI | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_ARABIC_TUNISIA | offset | 0x00f98128 | size | 0x00000468 | ||||||||||||||||||
name | RT_ICON | language | LANG_SAAMI | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_ARABIC_TUNISIA | offset | 0x00f98128 | size | 0x00000468 | ||||||||||||||||||
name | RT_ICON | language | LANG_SAAMI | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_ARABIC_TUNISIA | offset | 0x00f98128 | size | 0x00000468 | ||||||||||||||||||
name | RT_ICON | language | LANG_SAAMI | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_ARABIC_TUNISIA | offset | 0x00f98128 | size | 0x00000468 | ||||||||||||||||||
name | RT_STRING | language | LANG_SAAMI | filetype | data | sublanguage | SUBLANG_ARABIC_TUNISIA | offset | 0x00f98830 | size | 0x000001d4 | ||||||||||||||||||
name | RT_GROUP_ICON | language | LANG_SAAMI | filetype | data | sublanguage | SUBLANG_ARABIC_TUNISIA | offset | 0x00f98590 | size | 0x0000005a |
section | {u'size_of_data': u'0x00016200', u'virtual_address': u'0x0001b000', u'entropy': 7.257792145527329, u'name': u'.data', u'virtual_size': u'0x00f79348'} | entropy | 7.25779214553 | description | A section with a high entropy has been found | |||||||||
entropy | 0.429611650485 | description | Overall entropy of this PE file is high |