Overview

overview

7

Static

static

3

WFilter_3_...er.exe

windows7-x64

7

WFilter_3_...er.exe

windows10-2004-x64

7

WFilter_3_...��.pdf

windows7-x64

1

WFilter_3_...��.pdf

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    24f60d7db9bb0339d1515e246e9a58fa

  • Size

    2.9MB

  • MD5

    24f60d7db9bb0339d1515e246e9a58fa

  • SHA1

    708b2d91bddd826ccf835de6df124f6598ee7bf0

  • SHA256

    67cdd391d8ee1d9268b23ebd3d3011c2621489774fe54ead644beb424cc20cd2

  • SHA512

    df605ff54a148380b6d345ff3bcd7eee04ac3a55e241d1e56f8567641686a94b034f863d911df377d454e8c87f30f33ae62d4b151abe0c5ce89db5a854b33513

  • SSDEEP

    49152:cgKkL7sDugkq/HPmmB9hissmkuXcdFg5d9SGnOMIZ0gBKF3A8Zutu4:5KDVDBB9hiKYg5dMMGNKF3Io4

Score
3/10
pdflink

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 24f60d7db9bb0339d1515e246e9a58fa
    .rar
  • WFilter_3_1/WFilter.exe
    .exe windows:4 windows x86 arch:x86

    716d82654d143c146e0285d208c70cc2


    Headers

    Imports

    Sections

  • WFilter_3_1/安装指南.pdf
    .pdf

    • http://www.imfirewall.com

  • WFilter_3_1/安装需知.txt