TBN (SHIP PARTICULARS 2)[.]PDF[.]lzh | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TBN (SHIP PARTICULARS 2).PDF.lzh
Size

675KB
MD5

0668cc9c3e5a49298a36dc08130b4daf
SHA1

b70d6af29e0163786bdc66fddc1094df4fe683a6
SHA256

0cd02aea8c71da9eb2168194f399902f82f106fa392c13434c98452a25dba306
SHA512

ee25998ef0dc9888099b545e713849ddadcd7809f75c0e929e6b926e7c806f1c3494e2b75426bfe52c21e36a65ed920a9806850dd81e471d81268fbf8a15d594
SSDEEP

12288:8cvVpxiYKN6AjjxlLECNMM2d/M3ZFWo0m7xWhIYgNyCoUztnxSngJHdpX:8cvVpxithjxl/i9EiGlWt4CUzFH3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TBN (SHIP PARTICULARS 2).PDF.scr

Files

TBN (SHIP PARTICULARS 2).PDF.lzh
.lzh
TBN (SHIP PARTICULARS 2).PDF.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 702KB - Virtual size: 701KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ