General

  • Target

    16520114153.zip

  • Size

    113.8MB

  • MD5

    f6b5ccabd03578cbf00b5006cb9dd620

  • SHA1

    36fd82507bc47496b82d8ccce99835a26ff72038

  • SHA256

    2e392a0fddd485b24600022bd5a5b99aa50d4104f7947afcd766f3627e06fc62

  • SHA512

    06653892bce2e933b27583502a3d95e8f73a96964583309ac7a1da6a5de142409de68021e87ba6258f52588a19ed9d7991f8f083604704c990ddfaddc75e43fa

  • SSDEEP

    3145728:ytqafMvq3OGtC9i6Kk7fsSpoboZ9ZQx66aIKPpzxiaLWwP:UqaUvqoT7fFpoUZ9ZVrpzMAP

Score
6/10

Malware Config

Signatures

  • Malformed or missing cross-reference table in PDF

    Malformed or missing cross-reference tables are often used to evade detection

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 16520114153.zip
    .zip

    Password: infected

  • 82c019aef0d6b86c12c65151a85c7059584f56758dc910c18a2fca81b05b912f
    .zip
  • 1099Misc.inf
    .pdf
  • Wrights 2023 1040 W2s TaxDocumentPDF.exe
    .exe windows:6 windows x86 arch:x86

    5419c6d0b7a37c6f48c0d961a0d909db


    Code Sign

    Headers

    Imports

    Sections

  • g2m.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    0d4e155ed7c21a6b1640ba64f6bb0aaa


    Headers

    Imports

    Exports

    Sections