DFIR[.]pdf | Triage

Resubmissions

14-11-2023 16:11

Target

DFIR.pdf
Size

2.8MB
MD5

e372d1ba2d3a1936e3e8cdd3febf2038
SHA1

06ed6e0be895945bc78adac9aa0283e50fc93349
SHA256

137197636e52f813606d4d979a270447888336d3403d3c94fe39310a903a59f9
SHA512

058da6b05b73ba3d0a72d9565d9e663cec8857da03f3361fd6b6557f181c000d7c9c9668fa46b609f1568bc77e4485e494aae825b5b33efed2c1bb3c93d87e70
SSDEEP

49152:f5UX4uCXsw6rBbn0zdkfnDV/4TE6/lIKiebQ+LTq4ujYv9XiwuPNhO8NX:f5UX4JF6rBYzyfGTJ/lIVebQ+L2ZsVSR

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DFIR.pdf