MT[.]NAXOSVOY8PDA[.]pdf[.]lzh | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MT.NAXOSVOY8PDA.pdf.lzh
Size

633KB
MD5

aa625d68a9259bd03a9447e7b71d4770
SHA1

44e2d1d47af2f8a3152a68fc381a38c1ae38bdc3
SHA256

eb2c2d001095f68cab6d038c61c7a55ccc3bfcca272239b7d8fe48e049ce3f30
SHA512

23b36245badf96493c1b520303ef7fc05974597ac052dac4c29c02d5c3d23b076b46bf629824a3d7d1b7846c417285d800782ca67c0f2c3e6cea6ca1cc6eb15d
SSDEEP

12288:4sJXSoOcluukxo2gfVQvjZMs0ShYgd0hVh4DM3Eb03iS/egl83bMCXBY:4sNQc4ukxifVIFTduVp3bN/egAMCXBY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MT. NAXOS VOY 8 - PDA.pdf.scr

Files

MT.NAXOSVOY8PDA.pdf.lzh
.lzh
MT. NAXOS VOY 8 - PDA.pdf.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 651KB - Virtual size: 650KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ