Blue Sky 1_Q88 (Oil)_03May2024[.]doc[.]lzh | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Blue Sky 1_Q88 (Oil)_03May2024.doc.lzh
Size

640KB
MD5

372a3efababa1acabe2437d515be362c
SHA1

e345ddf2430ea56ee21788d4a9b8543cea2af054
SHA256

52751befd25cebfa74cd7f304d231ec273ae8c0ad9ceee72dc0d4a8b177dcf25
SHA512

260bc20e92fd618a37eb2fc8120ddd3ece930aed0873c69fbd8a659491265968b4f39097a92ce1592dcca173ca574c78e42238a1661ca0c1a9c0295b59c0eed8
SSDEEP

12288:z5t4M+GTDYbxtJ6SSm+SYhU1vSaf4vXVVL8GVDCWuBAZuafeZYaHDiZNNDr3bq:0SDSTJ6S5+SUDaf4PDL8ieWlTfTaHDIq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Blue Sky 1_Q88 (Oil)_03May2024.doc.scr

Files

Blue Sky 1_Q88 (Oil)_03May2024.doc.lzh
.lzh
Blue Sky 1_Q88 (Oil)_03May2024.doc.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

iiiK.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 695KB - Virtual size: 695KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ