scope of work[.]lzh | Triage

Sharing

Copy URL Twitter E-mail

General

Target

scope of work.lzh
Size

525KB
MD5

f643c695c1bd80a9bc4f6487bbcc133d
SHA1

0744cc7cd2db39de5b58540a59bdc304e4f07eb1
SHA256

60474e6447918adfb952b1b843088641c240ef7111b759fb38fc4c00f505925f
SHA512

6ad2363b632c0d9021a407f1873260682c33d2199e6254b12cc8a25076fa40c678dc24cd527810ca3ffc700b80fd54fdcb8212b14c6dd22ad8d44e8514e94fd9
SSDEEP

12288:Y1VUw2q+cmCjSpmzj1OpIWcjIyQ3ejYmcJJaVtRdxUhW+HW:Y13DZmMzjqIWiIy5MJstRRZ

Score

1^/10

Malware Config

Signatures

Files

scope of work.lzh
.rar
scope of work.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 611KB - Virtual size: 610KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ