{% extends "base.html" %} {% block content %}

Analysis 1

{% include "compare/_info.html" with record=left %}

Analysis 2

{% include "compare/_info.html" with record=right %}

Execution Graph

This graph gives you an abstracted overview of the execution of the analyzer file. More specifically it represents the percentage of occurrences of behavioral events classified by category: the bigger the colored block, the higher is the count of events for the respective category performed by the analyzed malware

Comparing two graphs from different analyses can give you help estimate how much the behavior of the two files differ.

Following are the colored categories:

registry filesystem system network process services synchronization windows

{% for cat, count in left_counts.items %}
{% endfor %}
{% for cat, count in right_counts.items %}
{% endfor %}

Summary Similarities

{% if summary.files %} {% for file in summary.files %} {{file}}
{% endfor %} {% else %} No similarly accessed files. {% endif %}
{% if summary.read_files %} {% for file in summary.read_files %} {{file}}
{% endfor %} {% else %} No similarly read files. {% endif %}
{% if summary.write_files %} {% for file in summary.write_files %} {{file}}
{% endfor %} {% else %} No similarly written files. {% endif %}
{% if summary.delete_files %} {% for file in delete_files %} {{file}}
{% endfor %} {% else %} No similarly deleted files. {% endif %}
{% if summary.keys %} {% for key in summary.keys %} {{key}}
{% endfor %} {% else %} No similarly accessed registry keys. {% endif %}
{% if summary.read_keys %} {% for key in summary.read_keys %} {{key}}
{% endfor %} {% else %} No similarly read registry keys. {% endif %}
{% if summary.write_keys %} {% for key in summary.write_keys %} {{key}}
{% endfor %} {% else %} No similarly written registry keys. {% endif %}
{% if summary.delete_keys %} {% for key in summary.delete_keys %} {{key}}
{% endfor %} {% else %} No similarly deleted registry keys. {% endif %}
{% if summary.resolved_apis %} {% for api in summary.resolved_apis %} {{api}}
{% endfor %} {% else %} No similarly resolved API imports. {% endif %}
{% if summary.executed_commands %} {% for cmd in summary.executed_commands %} {{cmd}}
{% endfor %} {% else %} No similarly executed commands. {% endif %}
{% if summary.mutexes %} {% for mutex in summary.mutexes %} {{mutex}}
{% endfor %} {% else %} No similarly created mutexes. {% endif %}
{% if summary.created_services %} {% for service in summary.created_services %} {{service}}
{% endfor %} {% else %} No similarly created services {% endif %}
{% if summary.started_services %} {% for service in summary.started_services %} {{service}}
{% endfor %} {% else %} No simiarly started services. {% endif %}
{% endblock %}