TAQAH PARTICULARS(1)[.]pdf[.]lzh | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TAQAH PARTICULARS(1).pdf.lzh
Size

654KB
MD5

a37cc15d65811e7973b590fcd61dfaaf
SHA1

b1c84a93493b20afee2e8aca8c76e373625bed02
SHA256

0d1305dc6aa09009afb12797f3b0b53721aec0f05b3816560b2ca9da9673f608
SHA512

0703c24932f67c2d164e1855d41bcad6b293162223ca49d9104e6b28ea0e8bfe6666cda4c57af17c80062e90d7622cabeb2aed71fac97460b5902ec21d30612c
SSDEEP

12288:3QhsViyLvJq/BcY1p0Q81S4mP1qgR+YCcFMDghxt4lpZmtO0:3JVrQtim13y+6Vmj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TAQAH PARTICULARS(1).pdf.exe

Files

TAQAH PARTICULARS(1).pdf.lzh
.lzh
TAQAH PARTICULARS(1).pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

zxiO.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 679KB - Virtual size: 678KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ