Report - 3-2.docx

ZIP Format Word 2007 file format(docx)
ScreenShot
Created 2023.06.11 21:38 Machine s1_win7_x6402
Filename 3-2.docx
Type Zip archive data, at least v2.0 to extract
AI Score Not founds Behavior Score
1.8
ZERO API file : clean
VT API (file)
md5 6fb67455d9c2283abe7c422939a35ba6
sha256 86969cae29f78c000354cca847621f41c729abbe3a63635440d3c1efc13309a3
ssdeep 6144:9301jlDTDPPZm3wS9cBfySYpxjWsfPGZkgywymxaR4HYhRyV:m1jNjZKwS9cxcpAsg74R44hRy
imphash
impfuzzy
  Network IP location

Signature (5cnts)

Level Description
notice Allocates read-write-execute memory (usually to unpack itself)
notice An application raised an exception which may be indicative of an exploit crash
notice Creates (office) documents on the filesystem
notice Creates hidden or system file
info One or more processes crashed

Rules (2cnts)

Level Name Description Collection
info docx Word 2007 file format detection binaries (upload)
info zip_file_format ZIP file format binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure