Report - s1.bin

Malicious Library Anti_VM OS Processor Check
ScreenShot
Created 2023.03.07 14:23 Machine s1_win7_x6401
Filename s1.bin
Type assembler source, ASCII text, with CRLF line terminators
AI Score Not founds Behavior Score
0.2
ZERO API file : clean
VT API (file)
md5 f2828ba07465ddb78784df30bf90b76f
sha256 483f44b3b4b57e945a78b4dea167a9c956830eb8941fff22e5000e6f0a64112a
ssdeep 49152:ZjQ/7z7ovYzs8Kut/SsoFTvedZrfZkafaoND2S0De2ucWrN0N8/7R:Zjs/9/7R
imphash
impfuzzy
  Network IP location

Signature (1cnts)

Level Description
info One or more processes crashed

Rules (3cnts)

Level Name Description Collection
watch Malicious_Library_Zero Malicious_Library binaries (upload)
notice anti_vm_detect Possibly employs anti-virtualization techniques binaries (upload)
info OS_Processor_Check_Zero OS Processor Check binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure