Overview

overview

5

Static

static

5

CDWinder R...rm.pdf

windows7-x64

3

CDWinder R...rm.pdf

windows10-2004-x64

3

CDWinder.exe

windows7-x64

3

CDWinder.exe

windows10-2004-x64

3

readme.pdf

windows7-x64

3

readme.pdf

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    897f8d623fb0f1e43afc33a9b2f0dd0a_JaffaCakes118

  • Size

    1.7MB

  • MD5

    897f8d623fb0f1e43afc33a9b2f0dd0a

  • SHA1

    a911a09e4df6684a84bf1fcf0fafa4a5fcc5384d

  • SHA256

    f588707e318f331a5bad5685b81d7bd7fb7279e95a9dadbd0def4f5eb56a8b04

  • SHA512

    2e445f827cc4a085f99f051bbb0bad76bd0339a666ee98ee6c1f5b1933f19e5ea82532ef300cb2c917bd819ce46fede61857226fa6cc13f8551c53213ecfeaf8

  • SSDEEP

    49152:dzKh4nkRUO22Gt0C8yBl6LJ2P03BTY8318mHtg0Z:dzY44UtZ0CrKv3zF8ma0Z

Score
5/10
pdflink

Malware Config

Signatures

  • Malformed data in PDF

    A PDF can contain malformed data to evade detection

    pdf
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 897f8d623fb0f1e43afc33a9b2f0dd0a_JaffaCakes118
    .rar
  • CDWinder Registration Form.pdf
    .pdf
  • CDWinder Software License.txt
  • CDWinder.exe
    .exe windows:4 windows x86 arch:x86

    f8da622beefd7f831961d5bde0a360e2


    Headers

    Imports

    Sections

  • readme.pdf
    .pdf

    • http://cdwinder.de

    • http://freedb.org

    • http://kagi.com

    • http://order.kagi.com/?32U

    • http://www.cdfinder.de

    • http://www.cdfinder.de/

    • http://www.cdwinder.de

    • http://www.cdwinder.de/

    • http://www.poikosoft.com/download.html

  • 下载说明.htm
    .html .js polyglot