General

  • Target

    testdisk-7.0.win.zip

  • Size

    11.9MB

  • MD5

    035792105f3221e1a8758e7f3f575418

  • SHA1

    f4fb7da983740b5d5d2bc0c84c866943de85d4fc

  • SHA256

    3c1fdbaca0ac686677f88b6bbf18d04c82f2c4047488c2e52da8e2347574b320

  • SHA512

    4c55bcd1916a94e9006381daa3d0a27dd2632f0f7c7dfa28b7f20ad8bf3f726ff4103d822b2f3f4027fb9c3fd2cb0c96bef2b098af33d6115e85482edeca10fc

  • SSDEEP

    196608:gNV2tPhuicH+HMI5pRN5utA+hVE6YuSbhclJVgwypkchISbhF0sA3r05:025AihHMItNotAaUuSNMJzyhhIKT0sz

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 25 IoCs

    Checks for missing Authenticode signature.

Files

  • testdisk-7.0.win.zip
    .zip
  • testdisk-7.0/63/cygwin
  • testdisk-7.0/AUTHORS.txt
  • testdisk-7.0/COPYING.txt
  • testdisk-7.0/INFO
  • testdisk-7.0/NEWS.txt
  • testdisk-7.0/QtCore4.dll
    .dll windows:4 windows x86 arch:x86

    805ed75bed37b594e5189ae163dd9310


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.0/QtGui4.dll
    .dll windows:4 windows x86 arch:x86

    a3eef0eecb8ee2ece987205e806ab40b


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.0/THANKS.txt
  • testdisk-7.0/VERSION.txt
  • testdisk-7.0/cyggcc_s-1.dll
    .dll windows:4 windows x86 arch:x86

    0abd4046f60f3a541d737e4fb950dae8


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.0/cygiconv-2.dll
    .dll windows:4 windows x86 arch:x86

    cb7c4a92b88f349e63e85b89c0a79395


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.0/cygjpeg-8.dll
    .dll windows:4 windows x86 arch:x86

    40144e71cec279f8006b00e708963671


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.0/cygncursesw-10.dll
    .dll windows:4 windows x86 arch:x86

    0bbd16e7bc72d3a2ab0243852cb2d952


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.0/cygssp-0.dll
    .dll windows:4 windows x86 arch:x86

    f81b20751bd8befe95ce832c0e5f59b1


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.0/cygwin1.dll
    .dll windows:4 windows x86 arch:x86

    47db924c9f4add2b049408e89a8845b4


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.0/cygz.dll
    .dll windows:4 windows x86 arch:x86

    29e8db22a77b12656485862f4900a389


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.0/documentation.html
    .html
  • testdisk-7.0/fidentify_win.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • testdisk-7.0/iconv.dll
    .dll windows:4 windows x86 arch:x86

    b0f9b5eaa27f04f514a1634df474aba9


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.0/libgcc_s_sjlj-1.dll
    .dll windows:4 windows x86 arch:x86

    134b9e5be65348789536924858d197a5


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.0/libjpeg-62.dll
    .dll windows:4 windows x86 arch:x86

    35dbc9046420d3ed674ada4049aef183


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.0/libpng16-16.dll
    .dll windows:4 windows x86 arch:x86

    c3455b2afa81abd2a0bc05ea15242c1b


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.0/libssp-0.dll
    .dll windows:4 windows x86 arch:x86

    eb746df6cf37d1788fed0ac24fdfa5ee


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.0/libstdc++-6.dll
    .dll windows:4 windows x86 arch:x86

    723c8fef8e650c05a79c4e692acf2913


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.0/libwinpthread-1.dll
    .dll windows:4 windows x86 arch:x86

    a2e3324ca9924fa5ea14ee2171cae5ea


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.0/photorec_win.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • testdisk-7.0/plugins/BartPE/Get_Files.cmd
    .cmd .vbs
  • testdisk-7.0/plugins/BartPE/Help.htm
    .html
  • testdisk-7.0/plugins/BartPE/RESET.cmd
  • testdisk-7.0/plugins/BartPE/ReadMe.txt
  • testdisk-7.0/plugins/BartPE/SCRIPTS/Start_INF.dat
  • testdisk-7.0/plugins/BartPE/SCRIPTS/StaticINF.dat
  • testdisk-7.0/plugins/BartPE/start.inf
  • testdisk-7.0/plugins/BartPE/testdisk_nu2menu.xml
  • testdisk-7.0/plugins/WinBuilder/Help.htm
    .html
  • testdisk-7.0/plugins/WinBuilder/ReadMe.txt
  • testdisk-7.0/plugins/WinBuilder/TestDisk.script
  • testdisk-7.0/qphotorec_win.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • testdisk-7.0/readme.txt
  • testdisk-7.0/testdisk_win.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • testdisk-7.0/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    ecad6077e50714376a4830a195899329


    Headers

    Imports

    Exports

    Sections