General

  • Target

    cal.pdf

  • Size

    45KB

  • MD5

    d03d0c8f24b109e6de668e082e214ccb

  • SHA1

    db935d6f7fd646daa760a9f760fc99587f7901be

  • SHA256

    53dfc7264954dcf97f158a13ec7470ddbeb8bde33c6b3ce66358e7efa74a0da4

  • SHA512

    922bf374aee29bb80a5727ab0fe02d3a1f35c0555da71f0549f48fcbfbc5b5f3407304da2c4b9540e88d8a701e0b206e60c43008f214f23872f106f68fe17c9d

  • SSDEEP

    768:cPcrNfC+uk7HylJ6NOmZmH9mZ8D7NAv8OVhpX247LuXwDZo1GHqwV2jiEfqkvcYR:cEhayc7waCv8IhpXnSXwDZoQHB2jFykj

Malware Config

Extracted

Family

metasploit

Version

windows/exec

Signatures

  • Metasploit family
  • PDF contains JavaScript

    Detects presence of JavaScript in PDF files.

  • PDF contains one or more embedded files

    Detects presence of embedded files in PDF files.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cal.pdf
    .pdf
  • template.pdf
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections