Report - 10.11.2023_SIPARIS_LISTESI.PDF.jar

ZIP Format
ScreenShot
Created 2023.11.11 16:18 Machine s1_win7_x6401
Filename 10.11.2023_SIPARIS_LISTESI.PDF.jar
Type Java archive data (JAR)
AI Score Not founds Behavior Score
1.6
ZERO API file : malware
VT API (file)
md5 36e1f972423dcb93ee5308ae5f956612
sha256 9d8de44cbfe1a44c0541eaf04efb9a81368f629daf558874d78d4a82ce2b0e1a
ssdeep 6144:BH3EYQ6EK7YBjAJhZ3JfMEg5F7uEJekvres27HLV2t0CkQ:1Q6E6qjsPpgKE7vrexHQZb
imphash
impfuzzy
  Network IP location

Signature (3cnts)

Level Description
danger A potential heapspray has been detected. 726 megabytes was sprayed onto the heap of the java.exe process
notice Allocates read-write-execute memory (usually to unpack itself)
info Checks amount of memory in system

Rules (1cnts)

Level Name Description Collection
info zip_file_format ZIP file format binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure