Overview

overview

6

Static

static

6

Additional...on.pdf

windows7-x64

1

Additional...on.pdf

windows10-2004-x64

1

IMM0008_Sc...2).pdf

windows7-x64

1

IMM0008_Sc...2).pdf

windows10-2004-x64

1

IMM5562 SU...ON.pdf

windows7-x64

1

IMM5562 SU...ON.pdf

windows10-2004-x64

1

IMM5669 - ...on.pdf

windows7-x64

1

IMM5669 - ...on.pdf

windows10-2004-x64

1

IMM5955 Me...re.pdf

windows7-x64

1

IMM5955 Me...re.pdf

windows10-2004-x64

1

Use of Rep...G).pdf

windows7-x64

1

Use of Rep...G).pdf

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    Fwd LDR Holdings - Documentation Process.msg

  • Size

    3.4MB

  • MD5

    ded383a6a83ec2f1801fe6ad67b5762f

  • SHA1

    f3eacf811d29e0663d0fdc2d37c26f0923636f1d

  • SHA256

    bbdd1f3a9295371b64a8374cec414935545fd5802a15b5c3d36617d1f0f95018

  • SHA512

    71e2d341e87bbc5d25d19a3512bc7427181148d2d894b001b4cd56278b38ad952d6cff35b35bccfce7203b7a2a54b267a72f45392157479dcf3905941742dcfc

  • SSDEEP

    98304:KbWJWBLzrH0mr0Ps16lpxgKySLeHuXUP3epR:nyz0mrX8LeHuQepR

Score
6/10
pdfjavascriptlink

Malware Config

Signatures

  • PDF contains JavaScript

    Detects presence of JavaScript in PDF files.

    pdfjavascript
  • Malformed data in PDF

    A PDF can contain malformed data to evade detection

    pdf
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • Fwd LDR Holdings - Documentation Process.msg
    .msg

    • http://gmail.com

    • http://icc-ca.com

    • http://ldrholdings.com

  • Additional Family Information.pdf
    .pdf
  • IMM0008_Schedule 3 Economic Classes - Fedral Skilled Workers (2).pdf
    .pdf
  • IMM5562 SUPPLEMENTARY INFORMATION.pdf
    .pdf

    • http://infosource.gc.ca

  • IMM5669 - Schedule A Background Declaration.pdf
    .pdf

    • http://Canadianlegislation.day

    • http://infosource.gc.ca

  • IMM5955 Medical Condition Questionnaire.pdf
    .pdf
  • Use of Representative Form _canada_IMM5476E (G).pdf
    .pdf