Static task
static1
Behavioral task
behavioral1
Sample
M.V. TBN - VESSEL PARTICULARS (3).PDF.scr
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
M.V. TBN - VESSEL PARTICULARS (3).PDF.scr
Resource
win10v2004-20240426-en
General
-
Target
M.V. TBN - VESSEL PARTICULARS (3).PDF.lzh
-
Size
675KB
-
MD5
2afd5f4c934f9bc95c4791a87ebaab07
-
SHA1
90dfb5eec5f54911650e7384e204f18cc892d514
-
SHA256
59e4e0e856cfaff0c0af1ef6d71207ef2751d463b03295699208efc130e5c8eb
-
SHA512
97ddc0d1db691252cd06511c4feadc19056d5f9ab65d83a2ae80039cbc45e740f7dd091ef3b3182b879b9f2562a21555bbd5864abc8ec4958f3998408fcc3cd4
-
SSDEEP
12288:zcvVpxiYKN6AjjxlLECNMM2d/M3ZFWo0m7xWhIYgNyCoUztnxSngJHdpX:zcvVpxithjxl/i9EiGlWt4CUzFH3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/M.V. TBN - VESSEL PARTICULARS (3).PDF.scr
Files
-
M.V. TBN - VESSEL PARTICULARS (3).PDF.lzh.lzh
-
M.V. TBN - VESSEL PARTICULARS (3).PDF.scr.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 702KB - Virtual size: 701KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ