Report - DZQCirIAcHMmDb.js

ScreenShot
Created 2023.06.15 14:11 Machine s1_win7_x6402
Filename DZQCirIAcHMmDb.js
Type ASCII text, with very long lines, with CRLF line terminators
AI Score Not founds Behavior Score
1.0
ZERO API file : clean
VT API (file) 2 detected ()
md5 63fd837c2148074ef5d675f8f4158433
sha256 364c5234a6975820d4139db6592f893b839cb7602defd0ac43f36cd457e96fde
ssdeep 6144:bSfr0dh2tgcH6YTkM0cNRcpZwg/EBQ+8N/ygD1pRbjIS5QIhXXRWMrDhS:bSfrSh2tgcH6YTkMXRcpZwg/QQ+I/ygI
imphash
impfuzzy
  Network IP location

Signature (3cnts)

Level Description
notice Allocates read-write-execute memory (usually to unpack itself)
notice File has been identified by 2 AntiVirus engines on VirusTotal as malicious
info One or more processes crashed

Rules (0cnts)

Level Name Description Collection

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure