Shandong Tanggang Steel Quotation[.]7z | Triage

Sharing

General

Target

Shandong Tanggang Steel Quotation.7z
Size

648KB
MD5

983de6fca021d518bc05143c02016294
SHA1

ab44d9ccdecf2f44062dc88d814af37a025db4ed
SHA256

a44bd58e10ca8e63b4ce73fd527cf042e0a3068c5dc86acedef79a273b10f063
SHA512

93c2d383d9f8bcc286e8ffeee83cc980c3fb8f3d894d92fd02ecec64466a85b28772cfdc6d6b53fced1c6214e3b79bd1b8a03d742f76dcad87f0200204ec3161
SSDEEP

12288:0FkLfErYIFG2VaBVrLN4SqMYcRlJdlpfFjU9R:0FkLfEUIFRVaBVrLN+chdlpf6H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Shandong Tanggang Steel Quotation.pdf.exe

Files

Shandong Tanggang Steel Quotation.7z
.rar
Shandong Tanggang Steel Quotation.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 683KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ