Report - pngebanoe.hta.html

ScreenShot
Created 2022.01.19 18:20 Machine s1_win7_x6402
Filename pngebanoe.hta.html
Type HTML document, ASCII text, with very long lines
AI Score Not founds Behavior Score
1.0
ZERO API file : clean
VT API (file) 1 detected (amhb)
md5 72f2b5e794eb3c55b38720bbaadb3385
sha256 ca783f4f7f62fe8c8944d88c8055f6b28efad745ffd7d5ecccbdff46e8414df3
ssdeep 192:oEQR7IPmXYvXw95RsbMbDH03PqiOPvJj1+4RFt1lTjWXAo2cn/K1nZvdv3:h2cPg0W5RsbMfHfRj7rLTjW4cn/udv3
imphash
impfuzzy
  Network IP location

Signature (3cnts)

Level Description
notice Allocates read-write-execute memory (usually to unpack itself)
notice File has been identified by one AntiVirus engine on VirusTotal as malicious
info One or more processes crashed

Rules (0cnts)

Level Name Description Collection

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure