cal-4700[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cal-4700.zip
Size

914KB
MD5

af2c71256cbf47a18c230f250a3421c4
SHA1

0824b43c0a0b42179299ee9f456e541303b5e97d
SHA256

238892b5cb6fdfe0a372fa8165d85b39af4812e738d247fbf933295f92e493af
SHA512

ad9b17a7144c73cc076fa9648ea4b0989f1a1ee2ea71e523780b36e663a4bde6d4aedf9e8a8319cdaa282311276a3821777e034651e30127a4904de2b8b89883
SSDEEP

24576:ZyilBUrI73n8IRKxB7jmAz0o8nxgVuLfThdJ:ciXe28KKnP0fnxSwThdJ

Score

5^/10

pdf

Malware Config

Signatures

Malformed data in PDF
A PDF can contain malformed data to evade detection
pdf

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cal-4700/cal-4700.exe

Files

cal-4700.zip
.zip
cal-4700/cal-4700.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

data
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

code
Size: 683KB - Virtual size: 683KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cal-4700/documentation/ebnf
.ps1
cal-4700/documentation/instructions
cal-4700/documentation/instructions.pdf
.pdf
cal-4700/lexicon/lexicon
cal-4700/the compiler
cal-4700/the desktop
cal-4700/the editor
cal-4700/the finder
cal-4700/the noodle
cal-4700/the writer