Report - Cir-Bfg-Int.docx

ScreenShot
Created 2021.05.15 18:59 Machine s1_win7_x6401
Filename Cir-Bfg-Int.docx
Type Microsoft Word 2007+
AI Score Not founds Behavior Score
1.2
ZERO API file : clean
VT API (file)
md5 efaacae225968dba1880a01cd5e8c976
sha256 7751776f35e5eae53c4d6a3e5bc216f8cc3bcdafa856b6dd6b1c18f982615448
ssdeep 384:Hsa/iEmRisFEDIIVfM/+jhkNE43Gqv8U9UdlWN6ysJ:H5iPiaoX8+jhkNEurHaPFJ
imphash
impfuzzy
  Network IP location

Signature (3cnts)

Level Description
notice Allocates read-write-execute memory (usually to unpack itself)
notice Creates (office) documents on the filesystem
notice Creates hidden or system file

Rules (0cnts)

Level Name Description Collection

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure