dialog
initDialog
show
General
-
Target
a073aa3228359c80bf3813ec63af3f8a
-
Size
2.7MB
-
MD5
a073aa3228359c80bf3813ec63af3f8a
-
SHA1
f239862c7614d90832ab305b4d983a7ed1b09f5e
-
SHA256
152754a33566d16caabc784b4b209199551454d236b9ac7e63bc098b946b9c5e
-
SHA512
6626c9f94d3fd991a88249f7d7cc06ea52d1a7f862051423b7939e9f217c71debc9b196862d954bae8d7e383a6cd2ffea89b51b68f2b7df5bac6ab11070e0333
-
SSDEEP
49152:osDmBcseSMgAMND5mK+L5yCfivkrY7X2joeoJrPnx1FgzxXD5NpeBd4m5tTu:lDNsenolbCfivkrY7UNoJrvCD5GT4it6
Score
7/10
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
-
Unsigned PE 8 IoCs
Checks for missing Authenticode signature.
-
NSIS installer 2 IoCs
Files
-
a073aa3228359c80bf3813ec63af3f8a
9632e80596371cfa7f563f680f3c4498
Headers
Imports
Sections
-
$PLUGINSDIR/InstallOptions.dll
3764e6c387ce3c76b39936a24d523dce
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/ioSpecial.ini
-
$PLUGINSDIR/modern-wizard.bmp
-
Docs/COPYRIGHT.txt
-
Docs/INSTALL.TXT
-
Docs/INSTALL_Deutsch.txt
-
Docs/Solutions.txt
-
Docs/annots_info_deutsch.txt
-
Docs/pstill_registration.pdf
-
http://this.net
-
-
Docs/registration_deutsch.pdf
-
http://this.net
-
-
PSFonts/PStillWDPattern
-
PSFonts/PStillWDPattern.metrics
-
PSFonts/PStillWDPattern.widths
-
PStillConfig.inf
-
Whats_new_in_1_72.pdf
-
annots.sl
-
controls/FILL-on-1-letter.sl
-
controls/GEN-TextOverprint.sl
-
controls/JAVASCRIPT-expireDoc_example.sl
-
controls/NUP-2-on-1-double.sl
-
controls/NUP-2-on-1.sl
-
controls/NUP-4-on-1.sl
-
controls/NUP-8-on-1.sl
-
controls/NUP-booklet-4-on-1.sl
-
controls/OUTLINES-add_some.sl
-
controls/POSTER-4x-tiled-Letter.sl
-
controls/POSTER-A1-tiled-A4.sl
-
controls/POSTER-tiled-A4.sl
-
controls/POSTER-tiled-Letter.sl
-
controls/SCALE-to-a2.sl
-
controls/SCALE-to-a3.sl
-
controls/SCALE-to-a4.sl
-
controls/SCALE-to-letter.sl
-
controls/SETINFO_fields.sl
-
controls/STAMP-addPageNum.sl
-
doctypes.config
-
fontsub.table
-
fontsub_gsfonts.table
-
gpstill.exe
Headers
Sections
-
gpstill_deutsch.exe
Headers
Sections
-
init.still
-
make_fonts.bat
-
pstill-license.txt
-
pstill.exe
Headers
Sections
-
pstill_guide.pdf
-
readme.htm
-
setups/DefaultOffice.setup
-
setups/DefaultPreprint.setup
-
setups/DefaultWeb.setup
-
testfile.ps
-
ttf2pt1.exe
Headers
Sections
-
uninst-pstill.exe
9632e80596371cfa7f563f680f3c4498
Headers
Imports
Sections
-
zlib.dll
Headers
Exports
Sections