ScreenShot
Created 2021.07.09 10:06 Machine s1_win7_x6401
Filename index.jar
Type Zip archive data, at least v2.0 to extract
AI Score Not founds Behavior Score
2.0
ZERO API file : clean
VT API (file) 9 detected (Banload, iacgm, JAVA, MRAF, Malicious, score, Artemis)
md5 a53c10a1311d5e77559b0d3a23e24488
sha256 1a33f3131e502de66b9266f3474e0c71b420f6619671e0414cc3b30e93f28bd6
ssdeep 3072:JrGOdWMxmjIK12v3BuRAtVhahkxRCnPOBP43PyRJQfZb1f2FSsxEJW:JrZdWQmcK8v3BuRCxRCPOBP2fZROQW
imphash
impfuzzy
  Network IP location

Signature (4cnts)

Level Description
danger A potential heapspray has been detected. 873 megabytes was sprayed onto the heap of the java.exe process
notice Allocates read-write-execute memory (usually to unpack itself)
notice File has been identified by 9 AntiVirus engines on VirusTotal as malicious
info Checks amount of memory in system

Rules (0cnts)

Level Name Description Collection

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure