General

  • Target

    Copyright infringement record.zip

  • Size

    102.3MB

  • MD5

    25d0fe848de04b4beb3673fc3aae7f0d

  • SHA1

    67ec152d513203fb7cfe4919321a6a000e91957d

  • SHA256

    e6315b24e0311758da1c25daa5f2724da4f534ed7ed644cbf43f3cc64c4676a7

  • SHA512

    8d486ff93418941d613ea79767c97059b4e6508b0dd82da5924be670219b9bc8778e478fc3bb5e22a70df8ef1e8bc198d0441e6779c45ff554fbaac16f770e62

  • SSDEEP

    3145728:M9WmBuj5V9/97h+8ZYqk/t5YVuxflmaKameBjn9NghzrvuRaUO:rbmtzm8/BhqrvuRc

Score
6/10

Malware Config

Signatures

  • Malformed or missing cross-reference table in PDF

    Malformed or missing cross-reference tables are often used to evade detection

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Copyright infringement record.zip
    .zip
  • Copyright infringement record.exe
    .exe windows:5 windows x86 arch:x86

    e456fbce099e309bfeaff191fcf3b1ee


    Code Sign

    Headers

    Imports

    Sections

  • msimg32.dll
    .dll windows:6 windows x86 arch:x86

    146cda7c77660159411991794dc785ec


    Headers

    Imports

    Exports

    Sections

  • renameme.renameme
    .pdf