Report - Photo.scr

Generic Malware Malicious Library UPX PE File OS Processor Check
ScreenShot
Created 2024.06.29 15:13 Machine s1_win7_x6403
Filename Photo.scr
Type MS-DOS executable
AI Score Not founds Behavior Score
0.4
ZERO API file : clean
VT API (file) 2 detected (Detected)
md5 fd7013ee044ed4547f701d01a982b582
sha256 f3db48c69ab567343534832dc36b54e8d7adb88405d9b8f5b0fd19d0b5208103
ssdeep 24576:E3oCTTeZTfxn19zFdgM+lu8n5bmG6Iemidp1YdGrksfC3fTIWhgbQD+n0StfHryk:E3XTTsTBngQ2PTedXOfTInUC0qrtD
imphash
impfuzzy
  Network IP location

Signature (1cnts)

Level Description
notice File has been identified by 2 AntiVirus engines on VirusTotal as malicious

Rules (5cnts)

Level Name Description Collection
warning Generic_Malware_Zero Generic Malware binaries (upload)
watch Malicious_Library_Zero Malicious_Library binaries (upload)
watch UPX_Zero UPX packed file binaries (upload)
info OS_Processor_Check_Zero OS Processor Check binaries (upload)
info PE_Header_Zero PE File Signature binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure