MTM TBA VSL's DETAILS[.]pdf[.]lzh | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MTM TBA VSL's DETAILS.pdf.lzh
Size

671KB
MD5

f08918e8fe97c16b2662ad9b9cbd0ec8
SHA1

81716c6884e753595ccb4d3a0635869ee548ca40
SHA256

e5a9f67154554cda576be8977ff030c6046a47994d16466a26cf244e2d63b7a4
SHA512

f495d271e096c23908b16881138304854c56804f9b580d89e434eb0860034df5646488b60ef7cf9dd4cd867e344d3dcd1851c7d68892a3808ce737eb9485add7
SSDEEP

12288:ykxgpXMitb5KoAxCBxVu62gpG3SlixhlfDHKIRek806Y7YJsTO:ykuBUxC9+lWdHpY7LK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MTM TBA VSL's DETAILS.pdf.scr

Files

MTM TBA VSL's DETAILS.pdf.lzh
.lzh
MTM TBA VSL's DETAILS.pdf.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 836KB - Virtual size: 835KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ