677b1a40861aedb2364b56052a84c94c4645a9aad10dce54d6f79be7c31207d5

Sharing

Copy URL

Twitter E-mail

Reason

scan timeout

General

Target

677b1a40861aedb2364b56052a84c94c4645a9aad10dce54d6f79be7c31207d5
Size

195.8MB
MD5

618bf56be26ef17dc259c14f430cb3e1
SHA1

50b687ea6ee7c30b57fdfe0a49da8e63403fcf05
SHA256

677b1a40861aedb2364b56052a84c94c4645a9aad10dce54d6f79be7c31207d5
SHA512

457263db5aa151908755fc36a5648ae080b1e3a4d1ddbeccf2fef5c842044e7859785d0ed0dde5cd5b11ae383b90b4a20464edbf2be2e6a2bcb7514e191cf0a0
SSDEEP

786432:AuF+LH6mmd2AJ0lygmgyjrssrfiOD/GhfazkPWrQ7vSthq+lWds4DPjuxq6fBu9z:ASOHRmdfJ0zmgurssrpyPzwfQux047

Score

4^/10

pdf link

Malware Config

Signatures

HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
pdf link

Processes:

resource yara_rule

sample pdf_with_link_action

resource	yara_rule
sample	pdf_with_link_action

Files

677b1a40861aedb2364b56052a84c94c4645a9aad10dce54d6f79be7c31207d5
.dll windows x64

b050a8310bba918320f206f649da94c4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

winmm

kernel32

GetThreadGroupAffinity
GetThreadId
GetThreadPreferredUILanguages
GetThreadPriority
GetThreadPriorityBoost
GetThreadTimes
GetTickCount
GetTimeFormatEx
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultLangID
GetUserDefaultUILanguage
GetUserGeoID
GetVersionExW
GetVolumeInformationW
GetVolumeNameForVolumeMountPointW
GetVolumePathNameW

Exports

Exports

ChromeMain
CrashForExceptionInNonABICompliantCodeRange
GetHandleVerifier
IsSandboxedProcess
RelaunchChromeBrowserWithNewCommandLineIfNeeded
_ovly_debug_event
nacl_global_xlate_base
nacl_thread_ids
nacl_user

Sections

.text
Size: 166.7MB - Virtual size: 166.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23.0MB - Virtual size: 23.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 783KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gxfg
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 200B

.rodata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 713B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.voltbl
Size: 512B - Virtual size: 116B

CPADinfo
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

malloc_h
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 297KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

Errors

General

Malware Config

Signatures

Files

b050a8310bba918320f206f649da94c4

Headers

DLL Characteristics

File Characteristics

Imports

winmm

kernel32

Exports

Exports

Sections

.text Size: 166.7MB - Virtual size: 166.7MB

.rdata Size: 23.0MB - Virtual size: 23.0MB

.data Size: 783KB - Virtual size: 3.2MB

.pdata Size: 4.9MB - Virtual size: 4.9MB

.00cfg Size: 512B - Virtual size: 40B

.gxfg Size: 17KB - Virtual size: 17KB

.retplne Size: 512B - Virtual size: 200B

.rodata Size: 4KB - Virtual size: 4KB

.tls Size: 1024B - Virtual size: 713B

.voltbl Size: 512B - Virtual size: 116B

CPADinfo Size: 512B - Virtual size: 56B

_RDATA Size: 512B - Virtual size: 244B

malloc_h Size: 2KB - Virtual size: 1KB

.rsrc Size: 297KB - Virtual size: 296KB

.reloc Size: 1.4MB - Virtual size: 1.4MB

.text
Size: 166.7MB - Virtual size: 166.7MB

.rdata
Size: 23.0MB - Virtual size: 23.0MB

.data
Size: 783KB - Virtual size: 3.2MB

.pdata
Size: 4.9MB - Virtual size: 4.9MB

.00cfg
Size: 512B - Virtual size: 40B

.gxfg
Size: 17KB - Virtual size: 17KB

.retplne
Size: 512B - Virtual size: 200B

.rodata
Size: 4KB - Virtual size: 4KB

.tls
Size: 1024B - Virtual size: 713B

.voltbl
Size: 512B - Virtual size: 116B

CPADinfo
Size: 512B - Virtual size: 56B

_RDATA
Size: 512B - Virtual size: 244B

malloc_h
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 297KB - Virtual size: 296KB

.reloc
Size: 1.4MB - Virtual size: 1.4MB