General

  • Target

    testdisk-7.1.win.zip

  • Size

    20.5MB

  • MD5

    83b9d87913f19b580d69de68f5f4c1f7

  • SHA1

    2f2131deee5152cbc08e54be440386ad0f3cf705

  • SHA256

    1231ccfd46815e324f3c541b1e4a0a569a0a16b5c7d320c8c049c36595785224

  • SHA512

    8f735b2ae0fb5ad01b5f48c7cd0454dab06edf58ba4b79b4904657818c8d681e1cbb3fb95366f2eaa52957a455cc22d48b6bfaa333d906b146ce9441e7dbd622

  • SSDEEP

    393216:s6tXrpdhyJQj5ZaFMVQO/SmRcNtpT0+y6Ljpfxx3Wg0PrcsPRg0/WL6Gys:R9rP1XaFMVQO/SmRc1bLY/PrHGys

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 28 IoCs

    Checks for missing Authenticode signature.

Files

  • testdisk-7.1.win.zip
    .zip
  • testdisk-7.1/63/cygwin
  • testdisk-7.1/AUTHORS.txt
  • testdisk-7.1/COPYING.txt
  • testdisk-7.1/INFO
  • testdisk-7.1/NEWS.txt
  • testdisk-7.1/Qt5Core.dll
    .dll windows:4 windows x86 arch:x86

    0de6d7acab04e4afdcba2cb0a22acb9e


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/Qt5Gui.dll
    .dll windows:4 windows x86 arch:x86

    3e24118bdcfd69b891d6ff2c805a1558


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/Qt5Widgets.dll
    .dll windows:4 windows x86 arch:x86

    769723a1387c9a7d2d16514458abd0f4


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/THANKS.txt
  • testdisk-7.1/VERSION.txt
  • testdisk-7.1/cygewf-2.dll
    .dll windows:4 windows x86 arch:x86

    eaa5ea512dbcec2d4cd4f365e00ee7d1


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/cyggcc_s-1.dll
    .dll windows:4 windows x86 arch:x86

    0abd4046f60f3a541d737e4fb950dae8


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/cygiconv-2.dll
    .dll windows:4 windows x86 arch:x86

    d713d8104f2b9acff3a92d9816aadae3


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/cygjpeg-8.dll
    .dll windows:4 windows x86 arch:x86

    781445d863bdd71ae45a3c1685939a35


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/cygncursesw-10.dll
    .dll windows:4 windows x86 arch:x86

    c8d04ca784855658780767bd20fd8305


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/cygssp-0.dll
    .dll windows:4 windows x86 arch:x86

    cb97803e5420037d7521ab2c55c91fb5


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/cygwin1.dll
    .dll windows:4 windows x86 arch:x86

    9cdddee190d4aab70ce9c46f84f3410b


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/cygz.dll
    .dll windows:4 windows x86 arch:x86

    29e8db22a77b12656485862f4900a389


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/documentation.html
    .html
  • testdisk-7.1/fidentify_win.exe
    .exe windows:4 windows x86 arch:x86

    ee95a00a2ef4691dec6aa04517cb3932


    Code Sign

    Headers

    Imports

    Sections

  • testdisk-7.1/iconv.dll
    .dll windows:4 windows x86 arch:x86

    97a8d88c35f340e060cc7be450d9250c


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libbz2-1.dll
    .dll windows:4 windows x86 arch:x86

    babf6dc85dbcc057653f6a8aab04c86e


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libewf-2.dll
    .dll windows:4 windows x86 arch:x86

    247ed162af874d2b1fd903115fa8bd84


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libfreetype-6.dll
    .dll windows:4 windows x86 arch:x86

    6931e08d412c57bb78d1fc7946446b54


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libgcc_s_sjlj-1.dll
    .dll windows:4 windows x86 arch:x86

    1f9d36c309294ed238cc8699b0733ff6


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libglib-2.0-0.dll
    .dll windows:4 windows x86 arch:x86

    6082d94f5169970cea272f92fb63147e


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libharfbuzz-0.dll
    .dll windows:4 windows x86 arch:x86

    25e7eba33d4f1a5edc5048f54f83164f


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libintl-8.dll
    .dll windows:4 windows x86 arch:x86

    88126b4f36733dfb109350936bc3125b


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libjpeg-62.dll
    .dll windows:4 windows x86 arch:x86

    3f0075f06fbd9c9f07d12f9b93dd7082


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libpcre-1.dll
    .dll windows:4 windows x86 arch:x86

    2223c3e2fbaf5e2c0feab9e9bdd49ea8


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libpcre2-16-0.dll
    .dll windows:4 windows x86 arch:x86

    479bfa426324559ca83260ac4f0f0657


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libpng16-16.dll
    .dll windows:4 windows x86 arch:x86

    fd6fe20a5a431d6cd2cf7ee71ba49891


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libssp-0.dll
    .dll windows:4 windows x86 arch:x86

    3a52cb421c34edd1c7dcd727b0c46178


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libstdc++-6.dll
    .dll windows:4 windows x86 arch:x86

    fae521758c7b9da093abee9002298fb9


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/libwinpthread-1.dll
    .dll windows:4 windows x86 arch:x86

    1836737c2a93564e0fee584c5853293d


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/photorec_win.exe
    .exe windows:4 windows x86 arch:x86

    d51d805bdbf8df83b0f2b898e40abe85


    Code Sign

    Headers

    Imports

    Sections

  • testdisk-7.1/platforms/qwindows.dll
    .dll windows:4 windows x86 arch:x86

    0257ea105e715c7560233c2a5930919d


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.1/plugins/BartPE/Get_Files.cmd
    .cmd .vbs
  • testdisk-7.1/plugins/BartPE/Help.htm
    .html
  • testdisk-7.1/plugins/BartPE/RESET.cmd
  • testdisk-7.1/plugins/BartPE/ReadMe.txt
  • testdisk-7.1/plugins/BartPE/SCRIPTS/Start_INF.dat
  • testdisk-7.1/plugins/BartPE/SCRIPTS/StaticINF.dat
  • testdisk-7.1/plugins/BartPE/start.inf
  • testdisk-7.1/plugins/BartPE/testdisk_nu2menu.xml
  • testdisk-7.1/plugins/WinBuilder/Help.htm
    .html
  • testdisk-7.1/plugins/WinBuilder/ReadMe.txt
  • testdisk-7.1/plugins/WinBuilder/TestDisk.script
  • testdisk-7.1/qphotorec_win.exe
    .exe windows:4 windows x86 arch:x86

    28babc01db68f76b3f3d9252e950cdbd


    Code Sign

    Headers

    Imports

    Sections

  • testdisk-7.1/readme.txt
  • testdisk-7.1/testdisk.pdf
    .pdf
    • http://002cialLinuxbinariesfromwww.cgsecurity.org

    • http://002x_copy.zip

    • http://050.mov/.mp4

    • http://224toactivateit.6.4RunningQPhotoRecunderLinuxX.org

    • http://PhotoRecunderLinux................................186.4RunningQPhotoRecunderLinuxX.org

    • http://Playtheresultingtest.mov

    • http://Release7.1tarxjftestdisk-7.1-WIP.tar.bz

    • http://andruncatfile2_ftyp.movfile1_mdat.mov

    • http://andruntypefile2_ftyp.movfile1_mdat.mov

    • Show all
  • testdisk-7.1/testdisk_win.exe
    .exe windows:4 windows x86 arch:x86

    173ebc44233ed82e330736704bbbe0fe


    Code Sign

    Headers

    Imports

    Sections

  • testdisk-7.1/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    75b09abbd0bd4a034cc0d68bf6966356


    Headers

    Imports

    Exports

    Sections