General

  • Target

    2023-FILES-MY1040-w2-IRS-letter-1099r_PDF.zip

  • Size

    115.7MB

  • MD5

    e7203ee825209d06d3373d887b48d18c

  • SHA1

    c97e03c52212c8babead7ce7cbcb1380d9e19714

  • SHA256

    7fdd7e02c94fd64e1a19e51f03dd0819b23437711690882d5ca765997f2447e7

  • SHA512

    deef3ef7a5880b96d7f31156e61ad0e73be464e417a1d31f7c164629b3f586acd45041c408796fce1734bec73053214aa056670fd2fcfd278685b1726b28ba36

  • SSDEEP

    3145728:T3HdM43C3oYCqqAdLnV49lBTZITHAgKQtLGxzAfvDGOHaY1Ebs5cg6CKjN+:b5i/IbicUiN+

Score
6/10

Malware Config

Signatures

  • Malformed or missing cross-reference table in PDF

    Malformed or missing cross-reference tables are often used to evade detection

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-FILES-MY1040-w2-IRS-letter-1099r_PDF.zip
    .zip
  • 1099Misc.inf
    .pdf
  • 2023-FILES-MY1040-w2-IRS-letter-1099r_PDF.exe
    .exe windows:5 windows x86 arch:x86

    e456fbce099e309bfeaff191fcf3b1ee


    Code Sign

    Headers

    Imports

    Sections

  • msimg32.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    d65a597bca43126f1d29bb29799bec5e


    Headers

    Imports

    Exports

    Sections