Skip to content
This repository has been archived by the owner on Apr 26, 2021. It is now read-only.
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: cuckoosandbox/cuckoo
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: master
Choose a base ref
...
head repository: Jack2/cuckoo
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: master
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 5 commits
  • 5 files changed
  • 1 contributor

Commits on Oct 19, 2017

  1. Update static.py 

    for analysis .hwp added 1030 line
    @Jack2
    Jack2 authored Oct 19, 2017
    Copy the full SHA
    a47e8de View commit details

  2. Update filetree.js 

    for analysis .hwp added 254 line
    @Jack2
    Jack2 authored Oct 19, 2017
    Copy the full SHA
    0961fa8 View commit details

  3. Update submission.js 

    for analysis .hwp added 2413 line
    @Jack2
    Jack2 authored Oct 19, 2017
    Copy the full SHA
    16a4117 View commit details

  4. Update packages.py 

    for analysis .hwp added 44, 45 lines
    @Jack2
    Jack2 authored Oct 19, 2017
    Copy the full SHA
    d9719d9 View commit details

  5. Create hwp.py 

    for analysis *.hwp(Hangul (Korean) Word Processor File 5.x) malware
P.S install Hangul Word Processor 2010 ver. at analysis VM and Snapshot

ex) hangul malware example
- http://blog.talosintelligence.com/2017/02/korean-maldoc.htm
- http://blog.trendmicro.com/trendlabs-security-intelligence/hangul-word-processor-postscript-abused-malicious-attachments/
    @Jack2
    Jack2 authored Oct 19, 2017
    Copy the full SHA
    8365f5a View commit details
Loading