MAERSK Notice[.]pdf[.]exe | Triage

Resubmissions

23/05/2023, 03:12

230523-dqgk3see4v 3

18/05/2023, 23:18

230518-3absbsda61 10

Sharing

Copy URL Twitter E-mail

General

Target

MAERSK Notice.pdf.exe
Size

583KB
MD5

1a03617b830377d428396e92c5f87c0d
SHA1

c79a8639315504ab1fd67b378f254a0b48d5eec3
SHA256

dcaadd522142750f60b1ed397d23418147171f28cdb838eef985d16ed5b89f37
SHA512

eb7d03f3179b63e4cb11935ee9c54284a203038f76a647ab1743e23d20235f74b0be4e1a14ad4e4ec1ed416dfb84406849545189dc5e3d3e5892058f668646e5
SSDEEP

12288:RYRv5xxKYhc1XgfRMgPsuXH/kBMRfVy7np6:wdKYXRMgPsUc2c7nw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MAERSK Notice.pdf.exe

Files

MAERSK Notice.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 581KB - Virtual size: 580KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ