mkhg_NOTICE BALLAST WATER REPORT[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

mkhg_NOTICE BALLAST WATER REPORT.rar
Size

442KB
MD5

88c628929a2f6fb454c6b2f74d8dd82b
SHA1

45384e0d5e23ccdf31548ea97a2ed242b0ba946c
SHA256

f2972c31e2f61a4c2c6e04fdb20dad4c733cae4ee01d0896154554b1d0055488
SHA512

0f00eae2d5fd44f998d36256913e876e1d9951f9ae2ef3f29661105886fb939f68518c4b859ebfc029b60e8e6f0a0e89bf40c0d2b085889ccd6c50cd749c29d6
SSDEEP

12288:v1AJF7Dyc5jTHer7nHeRffRe5nLE8ryMX6:v1IFHyAT+3nHUghLE4t6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NOTICE BALLAST WATER REPORT.exe

Files

mkhg_NOTICE BALLAST WATER REPORT.rar
.rar
NOTICE BALLAST WATER REPORT.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 571KB - Virtual size: 571KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ