General

  • Target

    testdisk-7.1.win64.zip

  • Size

    21.5MB

  • MD5

    007d12cf6d46f7847fc6d5490075ab36

  • SHA1

    65cf4394e8680d506256d4cb32198e899e4e278a

  • SHA256

    2a82c5f4a29ee467ab1eff82bad1f9c10f71569512161acfabd58e9b8a3da314

  • SHA512

    752448028cfb08af3e4233f26880792de616e5fecdfb7dd8413085618e47d2efee9fb5bbe0821fb2c15034954954c487a23f242055d24076f54b9aa664ab4896

  • SSDEEP

    393216:U/TVjXbcG5OBHaeAtXciynwGMTDClBH0FTlUJ1tn+RrLHyV78KXJ0Kqud5aZyFZ:U7pXbcnBzA5ciwwGMPuH0kJvmNK6ub

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 28 IoCs

    Checks for missing Authenticode signature.

Files

  • testdisk-7.1.win64.zip
    .zip
  • testdisk-7.1/63/cygwin
  • testdisk-7.1/AUTHORS.txt
  • testdisk-7.1/COPYING.txt
  • testdisk-7.1/INFO
  • testdisk-7.1/NEWS.txt
  • testdisk-7.1/Qt5Core.dll
    .dll windows:4 windows x64 arch:x64

    e9be772f26022fd43ca4a701c74ef8ea


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/Qt5Gui.dll
    .dll windows:4 windows x64 arch:x64

    1de99afe655bf5c52fc97f9c4f178042


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/Qt5Widgets.dll
    .dll windows:4 windows x64 arch:x64

    2a416811dcfabff7f25ddc5d25ff18dc


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/THANKS.txt
  • testdisk-7.1/VERSION.txt
  • testdisk-7.1/cygewf-2.dll
    .dll windows:4 windows x64 arch:x64

    aa7b7030c6aee045dfc67642d986ac86


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/cyggcc_s-seh-1.dll
    .dll windows:4 windows x64 arch:x64

    35ae5fee209363de3e58ddfb01b851d3


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/cygiconv-2.dll
    .dll windows:4 windows x64 arch:x64

    78d58db8fd7943e85ed1c4cd213ba39f


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/cygjpeg-8.dll
    .dll windows:4 windows x64 arch:x64

    8b817ca5be34a83975379ba82d646c94


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/cygncursesw-10.dll
    .dll windows:4 windows x64 arch:x64

    9d6fdc06ae0975c26331a464b12ed6f5


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/cygssp-0.dll
    .dll windows:4 windows x64 arch:x64

    14bd692133f9f31b09dfa95477c9a74c


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/cygwin1.dll
    .dll windows:4 windows x64 arch:x64

    ab2c9941b31956bc0d2c78a10c37e02b


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/cygz.dll
    .dll windows:4 windows x64 arch:x64

    9b87dea50bee52badb0204e28adc7b75


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/documentation.html
    .html
  • testdisk-7.1/fidentify_win.exe
    .exe windows:4 windows x64 arch:x64

    fb5bd0e355c6feb62519486720e5c7f3


    Code Sign

    Headers

    Imports

    Sections

  • testdisk-7.1/iconv.dll
    .dll windows:4 windows x64 arch:x64

    0b195d0b0828f122e1c234d175811fd7


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libbz2-1.dll
    .dll windows:4 windows x64 arch:x64

    962559c0706cb5be8a7259191248bfa3


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libewf-2.dll
    .dll windows:4 windows x64 arch:x64

    720ce77b6041bfbff1722e528a5be33c


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libfreetype-6.dll
    .dll windows:4 windows x64 arch:x64

    3e47d64339cb5747c72192ef7a5173d4


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libgcc_s_seh-1.dll
    .dll windows:4 windows x64 arch:x64

    bdf7aef72c3a6d3554e661d112f46234


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libglib-2.0-0.dll
    .dll windows:4 windows x64 arch:x64

    3c64e04cb6cc90cce5a50a2016b9ab98


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libharfbuzz-0.dll
    .dll windows:4 windows x64 arch:x64

    95bc69ac397d613ccae74e4cc8c5aa5c


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libintl-8.dll
    .dll windows:4 windows x64 arch:x64

    638b164339450fd34ae470455cc764cb


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libjpeg-62.dll
    .dll windows:4 windows x64 arch:x64

    465f2be5540fcc4a5390c541dc973752


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libpcre-1.dll
    .dll windows:4 windows x64 arch:x64

    4909d86e8d4f27d34abd965637b2f699


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libpcre2-16-0.dll
    .dll windows:4 windows x64 arch:x64

    9adbea889378741529c65bd278a8a3d9


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libpng16-16.dll
    .dll windows:4 windows x64 arch:x64

    5e164f18f199aba9bab372b81cdf76da


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libssp-0.dll
    .dll windows:4 windows x64 arch:x64

    1507636f5a1d63be73826bf12093f65a


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libstdc++-6.dll
    .dll windows:4 windows x64 arch:x64

    4c4fe25ee5250cab6a791c8225720e18


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libwinpthread-1.dll
    .dll windows:4 windows x64 arch:x64

    71e4e0cab4b86e987af034f1d455b872


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/photorec_win.exe
    .exe windows:4 windows x64 arch:x64

    70573bca6137afb85d96c41d49bc236b


    Code Sign

    Headers

    Imports

    Sections

  • testdisk-7.1/platforms/qwindows.dll
    .dll windows:4 windows x64 arch:x64

    ae20fc0400e1c62f7e0113c14701094e


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/qphotorec_win.exe
    .exe windows:4 windows x64 arch:x64

    c7dad187b53f1c702f1c27b7baa8c7fd


    Code Sign

    Headers

    Imports

    Sections

  • testdisk-7.1/readme.txt
  • testdisk-7.1/testdisk.pdf
    .pdf
    • http://002cialLinuxbinariesfromwww.cgsecurity.org

    • http://002x_copy.zip

    • http://050.mov/.mp4

    • http://224toactivateit.6.4RunningQPhotoRecunderLinuxX.org

    • http://PhotoRecunderLinux................................186.4RunningQPhotoRecunderLinuxX.org

    • http://Playtheresultingtest.mov

    • http://Release7.1tarxjftestdisk-7.1-WIP.tar.bz

    • http://andruncatfile2_ftyp.movfile1_mdat.mov

    • http://andruntypefile2_ftyp.movfile1_mdat.mov

    • Show all
  • testdisk-7.1/testdisk_win.exe
    .exe windows:4 windows x64 arch:x64

    97ab03ac2d8eba76bae834beb6647e0f


    Code Sign

    Headers

    Imports

    Sections

  • testdisk-7.1/zlib1.dll
    .dll windows:4 windows x64 arch:x64

    4e20c36aa130b377e93f71427251188c


    Headers

    Imports

    Exports

    Sections