NYK TBN DETAILS[.]pdf[.]lzh | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NYK TBN DETAILS.pdf.lzh
Size

675KB
MD5

e84293a47f161b3c45d64bfa1be835f6
SHA1

d7834b2b7375c296b51e0c013b930e2e36e76813
SHA256

eab1c0193e913d1c3a014eee84cee5336942a1e5b9f92ebbf5879689e9bb139c
SHA512

cd2b17ff5333e4f847a4e10cb2442f94715b93dc82bd39a25c142b9b649bc8d752ce8fdc8bc997def2a22f6f7e4f9d329f814f6737448a45b182970aac2c46e7
SSDEEP

12288:/cvVpxiYKN6AjjxlLECNMM2d/M3ZFWo0m7xWhIYgNyCoUztnxSngJHdpX:/cvVpxithjxl/i9EiGlWt4CUzFH3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NYK TBN DETAILS.pdf.scr

Files

NYK TBN DETAILS.pdf.lzh
.lzh
NYK TBN DETAILS.pdf.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 702KB - Virtual size: 701KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ