ScreenShot
| Created | 2023.11.11 16:40 | Machine | s1_win7_x6401 |
| Filename | siparis_listesi.pdf.jar | ||
| Type | Java archive data (JAR) | ||
| AI Score | Not founds | Behavior Score |
|
| ZERO API | file : malware | ||
| VT API (file) | |||
| md5 | e49231cd68ccb128e6f4a212c7398048 | ||
| sha256 | 09ed7be3bd26eb26e831109100d6b5d8e2e04d50111c7b012119783b022a0a46 | ||
| ssdeep | 3072:kGyxutnDP9bUMMrfKdvHtdZ68yi6IIMnc8NvMK2yFPeT:XyxutD1mrKdvHtC8B8MnBNvMK2OPa | ||
| imphash | |||
| impfuzzy | |||
Network IP location
Signature (3cnts)
| Level | Description |
|---|---|
| danger | A potential heapspray has been detected. 744 megabytes was sprayed onto the heap of the java.exe process |
| notice | Allocates read-write-execute memory (usually to unpack itself) |
| info | Checks amount of memory in system |
Rules (1cnts)
| Level | Name | Description | Collection |
|---|---|---|---|
| info | zip_file_format | ZIP file format | binaries (upload) |
Network (0cnts) ?
| Request | CC | ASN Co | IP4 | Rule ? | ZERO ? |
|---|