HONOR DIVA PARTICULARS[.]PDF[.]lzh | Triage

Sharing

General

Target

HONOR DIVA PARTICULARS.PDF.lzh
Size

653KB
MD5

68fe2ca8681206110101462cabcd2e42
SHA1

a70de5e206432b3de2194e2484ce4aabac142564
SHA256

4d85827e4b71b111c4d8e98f86822d8d711a49dba4a6519f18bd917952cd4a85
SHA512

05566360e583893e92d1d8e2759808070139435b3d2a8ee23e101fc68d75d7df685e140676d3d37bf4d019082be5e7b043d6e6822885c20a95cc40eba0e7c9e4
SSDEEP

12288:DYPjnRHU/70sDTTj2HyOQHgdTlKIeGM2KJpxgGRYB4RVYuJFVqc0tsoHfUXNgL:DYPaTDTHFOQATlSSKSGfxJWc0tNmo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/HONOR DIVA PARTICULARS.PDF.scr

Files

HONOR DIVA PARTICULARS.PDF.lzh
.lzh
HONOR DIVA PARTICULARS.PDF.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

XUlO.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 671KB - Virtual size: 671KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ