MV[.] PANOCEAN TBN (63K)[.]docx[.]lzh | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MV. PANOCEAN TBN (63K).docx.lzh
Size

633KB
MD5

e23d881387fd5a88bc6f32087974756a
SHA1

6071bcc906c76b1945de23a291fa2ddeb1a5f7d0
SHA256

6d8040e1969343c80d9168b4b35d1da67d32f92742078deb637592c39f68cc9a
SHA512

b0d800c7609e1e84983073069f1e4a19a0ece27bf0f817a4f326d5c9e279eb3de9368d3874c73426802ac3ac00625d57f59128176700e3370729add9fe1a4f99
SSDEEP

12288:vspH+X8Ac5jpXmS8vDjLbNlq35DjKzGIAY01JTGAR8H56MeLOi3:OHTActpXmjvXLTqJDjK5AY015sQM2Oi3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MV. PANOCEAN TBN (63K).docx.exe

Files

MV. PANOCEAN TBN (63K).docx.lzh
.lzh
MV. PANOCEAN TBN (63K).docx.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 650KB - Virtual size: 650KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ