General

  • Target

    CADe_SIMU V4.2.rar

  • Size

    18.3MB

  • MD5

    ddb463dac1d48d0537b95ee4d7495b0f

  • SHA1

    b3595f2675b0f0dccae5f0e73594f113ab9849b4

  • SHA256

    3c93d8b1e69fab840a52746dc183e2bcac113cf1f05bd558a689c0bb5f24f4aa

  • SHA512

    b2b2fd9955a8470e793d28c861cfbfd8253e9a07ec6bb5e808e0fadf63f07198ce4df6d709cfd56c2a718a1b091ccb10122c14dd4985419685afa9a970e09a12

  • SSDEEP

    393216:utTGhryhDpYNQHf08cT8HaaZOL1SbQxPi7Uvlsujm/0n7eM6rAgizTYLm:uZGhr+DpYs7aqOZO82ujyK776caS

Score
5/10
pdf

Malware Config

Signatures

  • Malformed data in PDF

    A PDF can contain malformed data to evade detection

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • CADe_SIMU V4.2.rar
    .rar
  • CADe_SIMU V4.2/CADe_SIMU_V4.0.exe
    .exe windows:4 windows x86 arch:x86

    b060b957c6714f41ea6b34e21fc84bd8


    Headers

    Imports

    Sections

  • CADe_SIMU V4.2/CADe_SIMU_V4.2.exe
    .exe windows:4 windows x86 arch:x86

    b060b957c6714f41ea6b34e21fc84bd8


    Headers

    Imports

    Sections

  • CADe_SIMU V4.2/MFC42D.DLL
    .dll windows:4 windows x86 arch:x86

    758f4745f1597b57f518e37f66808aa1


    Headers

    Imports

    Sections

  • CADe_SIMU V4.2/MFCO42D.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    89b19682777306e83b39c6d1dc27f181


    Headers

    Imports

    Exports

    Sections

  • CADe_SIMU V4.2/MSVCRTD.DLL
    .dll windows:4 windows x86 arch:x86

    aafabb794a4fc88d1217ad6b5bf28840


    Headers

    Imports

    Exports

    Sections

  • CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/IsoToS7online.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim-Manual-de.chm
    .chm
  • CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim-Manual-en.chm
    .chm
  • CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/doc/NetToPLCsim-Manual-de.pdf
    .pdf
  • CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/doc/NetToPLCsim-Manual-en.pdf
    .pdf
  • CADe_SIMU V4.2/libnodave.dll
    .dll windows:4 windows x86 arch:x86

    f331f5e16b89031f68a84f37f61339a9


    Headers

    Imports

    Exports

    Sections