Mariman Vessel's Details[.]PDF[.]lzh | Triage

Sharing

General

Target

Mariman Vessel's Details.PDF.lzh
Size

645KB
MD5

5b79e5893cf78a841a1f7ddfd14597f6
SHA1

eb86160365f5723ae5f9016aa8a65549aa109f08
SHA256

1fb41564539f993a7dece308b66a217a0dfd88a89a4019973fcb9a71deefa4a8
SHA512

01353821cfed5b041065cc16cd91f67a82a73e5eb1a82a341b734850300af0d37478793a944fe2168abcbe9c6688f5ec8d3b3483472e7f0659ea9d1952231fb1
SSDEEP

12288:aA7NTmGY2E80cN1oZnaQuIOL/7kh29Un8SH9yjrsjhmVromQS3GIc0Do:aE9mMZoZaQuIgkh2WnTWeo0HSWIc3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Mariman Vessel's Details.PDF.scr

Files

Mariman Vessel's Details.PDF.lzh
.lzh
Mariman Vessel's Details.PDF.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 715KB - Virtual size: 714KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ