popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

94f6d162d47da132_워싱턴선언, 북핵 위협 대응에 얼마나 도움이 될까.hwp

GIF Format MSOffice File HWP
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 May 10, 2023, 1:57 p.m. May 10, 2023, 1:59 p.m.
Size 57.5KB
Type Hangul (Korean) Word Processor File 5.x
MD5 c7b099c4f8b3e909becd086f29e18f91
SHA256 94f6d162d47da1320dc7194bfff2d78590353b59358a619d9ca8b68188d9368a
CRC32 8BC0627C
ssdeep 1536:pbUiut8Ihn1XwS8wqYQrdb9YNSxpL/Y8:VPdIhN4dqNqpL/Y
Yara
  • HWP_file_format - HWP Document File
  • Microsoft_Office_File_Zero - Microsoft Office File

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

IsDebuggerPresent

 0 0
Time & API Arguments Status Return Repeated

NtProtectVirtualMemory

 process_identifier: 2660
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x72dd2000
process_handle: 0xffffffff
1 0 0
file C:\Users\test22\AppData\Roaming\HNC\Office\Recent\Temp.folder.lnk
file C:\Users\test22\AppData\Roaming\HNC\Office\Recent\94f6d162d47da132_워싱턴선언, 북핵 위협 대응에 얼마나 도움이 될까.hwp.lnk
file C:\Users\test22\AppData\Roaming\HNC\Office\Recent\Temp.folder.lnk
file C:\Users\test22\AppData\Roaming\HNC\Office\Recent\94f6d162d47da132_워싱턴선언, 북핵 위협 대응에 얼마나 도움이 될까.hwp.lnk