Summary | ZeroBOX

zupiwor.pdf

PDF Suspicious Link PDF
Category Machine Started Completed
FILE s1_win7_x6402 July 9, 2021, 10:36 a.m. July 9, 2021, 10:38 a.m.
Size 69.1KB
Type PDF document, version 1.4
MD5 cc4ad8222b80e535506785ae1b6b6c30
SHA256 7f257f9b0d3cdf6a5d0b889270712d09946ee80262946cc41df713049724adf6
CRC32 5F253C7B
ssdeep 1536:G8I24vLvrEX4iKRORAkMcz12xQNC0g0MRU3Ds5:xI24zrEXbK4RvMxxvxAC
Yara
  • PDF_Suspicious_Link_Z - PDF Suspicious Link
  • PDF_Format_Z - PDF Format

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

NtProtectVirtualMemory

process_identifier: 2420
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x71623000
process_handle: 0xffffffff
1 0 0