General

  • Target

    Tax_Documents_PDF.zip

  • Size

    115.7MB

  • MD5

    41a9c203b9369a06ff7da0f21aa90f58

  • SHA1

    3c4561405c2453935d49aa641173d4b94ccc809c

  • SHA256

    a681247f97012f94a32e9b78f799802ace3cb3c4706c4cca1f52afee037f7710

  • SHA512

    6c4999b8a39501e0cbea06cce4e863ed51119b5a94b34b56b9e3b0827f0400d2bc41a6b0e4a4783ec50f6f62e0fa6c32611b8e2399bf155cd50fbe9927a9fb72

  • SSDEEP

    3145728:Q3HdM43C3oYCqqAdLnV49lBTZITHAgKQtLGxzAfvDGOHaY1Ebs5cg6CKhmZhYHU:45i/IbicUFqHU

Score
6/10

Malware Config

Signatures

  • Malformed or missing cross-reference table in PDF

    Malformed or missing cross-reference tables are often used to evade detection

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Tax_Documents_PDF.zip
    .zip
  • 1099Misc.inf
    .pdf
  • Tax_Documents_PDF.exe
    .exe windows:5 windows x86 arch:x86

    e456fbce099e309bfeaff191fcf3b1ee


    Code Sign

    Headers

    Imports

    Sections

  • msimg32.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    d65a597bca43126f1d29bb29799bec5e


    Headers

    Imports

    Exports

    Sections