Overview

overview

7

Static

static

7

info.pdf

windows7-x64

3

info.pdf

windows10-2004-x64

3

padpdf.exe

windows7-x64

7

padpdf.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a826a592ee6b2f66d788e98b653c5a51_JaffaCakes118

  • Size

    45KB

  • MD5

    a826a592ee6b2f66d788e98b653c5a51

  • SHA1

    334c4ff883f55813fbc864770ff9b582cb44c4a1

  • SHA256

    8e4ac71e32cfa66547eb3576135de893ca9e03ea93b276683d89bf219856b8e4

  • SHA512

    93ca497aec4e80c61509cf8373ee43b5db19c52e8a6a3d32432003f79f4f1b1258ed6eeac07c3d96a0f89a4b20e74df286dc80df06d76bd3d57696a7783b4d98

  • SSDEEP

    768:t50kl5jHYs8eAoHrrgpeuy7tG5ApkDqTSEvKuF34RRMlyrM8KfZNvg:t5bDTAcrrasSPEvK643M8ys

Score
7/10
pdflinkupx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a826a592ee6b2f66d788e98b653c5a51_JaffaCakes118
    .zip
  • file_id.diz
  • info.pdf
    .pdf

    • http://www.paehl.de

  • padpdf.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections