LU YANG SHUN PARTICULARS[.]doc[.]lzh | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LU YANG SHUN PARTICULARS.doc.lzh
Size

620KB
MD5

5d8687b19ec4ea55b201c9ca62672685
SHA1

6734c8721a87e7a9343ee7c6e0f716833c69fbfc
SHA256

ff01b844749bc624fcbf72ba0bbf3356b5fbbdda80c053966cf3ec3b22d65975
SHA512

73516844af00c1631169ce0debee0a5885a815acdb684fd330695525b2ae1575ddf5cba4fa45da49b576aa81d2ef4159fb5e8d31ecc5abc26c41b8d490e4e2ce
SSDEEP

12288:qH7LlNexfB/cB5fAbGqIdQP091/OqnYpE9Iwtm+7ByGJuHRJkYpq:qH3lNexfG5fAXWvHRIcb7ByGJuxSY8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/LU YANG SHUN PARTICULARS.doc.scr

Files

LU YANG SHUN PARTICULARS.doc.lzh
.lzh
LU YANG SHUN PARTICULARS.doc.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 635KB - Virtual size: 635KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ