BRAVE LEADER - VSL's DETAILS[.]doc[.]lzh | Triage

Sharing

General

Target

BRAVE LEADER - VSL's DETAILS.doc.lzh
Size

673KB
MD5

ede3f9e4fe8fd5d4fde5a12807d79d50
SHA1

89ce215ddce103e922280b4f7275f75b241f01c1
SHA256

79dd1aadfdbbfd04c5894b7c2d79cdf6f90d5a3e29d1d40fb6c37844347b72f0
SHA512

b82f5095243519c619aa1ec9a6c84b1cb52d7ea93109ee5bcf1e5179e5e0be9c35436ca15a731cfa091ee3d3974aaccf3efc98a59a3cb631fc977ffe02e9e132
SSDEEP

12288:zSymQhsTKtnKOv9bZb0EI1r3sStSad39u/dDLt7Bi8WWouS7yjdpa:z0iBEO1lLAltp9u/dltGHidpa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BRAVE LEADER - VSL's DETAILS.doc.scr

Files

BRAVE LEADER - VSL's DETAILS.doc.lzh
.lzh
BRAVE LEADER - VSL's DETAILS.doc.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 746KB - Virtual size: 744KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ