.. /.Pif

Executable
Native
Double Click

Author:

mr.d0x

Description:

PIF or Program Information File contains information about EXE files. PIF files can act as shortcuts to EXE files or can be executed if they contain executable data.

OS:

Windows

Recommendation:

There is little legitimate use for PIF files today. Download or execution of PIF files should be restricted.

Resources:

https://www.forcepoint.com/blog/x-labs/zeus-pif-evolving-strain-looking-defeat-your-security-software
https://www.zdnet.com/article/evolving-zeus-malware-used-in-targeted-email-attacks/

File Samples:

https://www.joesandbox.com/analysis/179247/0/html

Contributions: