text section which is very likely to contain packed code (zlib compression ratio < 0.3) Sample is known by Antivirus (Virustotal or Metascan) Key opened: HKEY_LOCAL _MACHINE\S oftware\Po licies\Mic rosoft\Win dows\Safer \CodeIdent ifiers Static file information: File size 1344512 > 1048576Ĭlassification label: mal56.spre software policies Submission file is bigger than most known malware samples Uses code obfuscation techniques (call, push, ret)
PE file contains sections with non-standard names exeīinary may include packed or encrypted code Found application associated with file extension.Successful, ratio: 99.3% (good quality ratio 93.8%).Number of analysed new started processes analysed: Windows 7 SP1 (with Office 2010 SP2, IE 11, FF 54, Chrome 60, Acrobat Reader DC 17, Flash 26, Java. Analysis Report Overview General Information
0 kommentar(er)
