General

  • Target

    Coffalyser.Net.zip

  • Size

    6.6MB

  • MD5

    bdf2133ed0094dc3bef1c1ad2b8b3fd9

  • SHA1

    e564a09e8f6c6a8ad515cd63f1fe76e92be7f43f

  • SHA256

    cf012ec8f7bc81f97692912b4962914d941f25cff2358674bd52a8ddd03b22bc

  • SHA512

    9590952005cdd1123eed8e790fd7a78d039e0c282ad53a8d5038ced10007d353d9bbf714b73ce2f08af807b55307a5fc5765a93b1f71ecacb4763bf566db5f09

  • SSDEEP

    196608:PUHo8U517s/uN9db+QmoBHywxhMQum4bb39e8wv:PUq517XN9BRMQuRRc

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 2 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Coffalyser.Net.zip
    .zip
  • Coffalyser.Net v.220513.1739 & v.240129.1959 Reference Manual v03.pdf
    .pdf
    • http://www.mrcholland.com

    • http://www.mrcholland.eu/

    • https://doi.org/10.5772/21898

    • https://doi.org/10.5772/21898en-GB

    • https://ec.europa.eu/tools/eudamed

    • https://ec.europa.eu/tools/eudamed.

    • https://ec.europa.eu/tools/eudameden-GB.

    • https://support.mrcholland.com/new-ticket

    • https://www.mrcholland.com/

  • Coffalyser.Net v.240129.1959 Installation Manual v01.pdf
    .pdf
    • http://en-US1.nl

    • http://en-US2.nl

    • http://en-US3.nl

    • http://en-US4.nl

    • http://en-US5.nl

    • http://en-US6.nl

    • https://ec.europa.eu/tools/eudamed

    • https://ec.europa.eu/tools/eudameden-GB.

    • https://www.mrcholland.com/

    • Show all
  • Coffalyser.Net.msi
    .msi
  • setup.exe
    .exe windows:5 windows x86 arch:x86

    367254f4e83f62f5437681fde2e55f48


    Headers

    Imports

    Exports

    Sections