TAQAH_SHIP's PARTICULARS_1[.]doc[.]lzh | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TAQAH_SHIP's PARTICULARS_1.doc.lzh
Size

639KB
MD5

cf52b8d17d97626e5c897d6164eaafcc
SHA1

ce677615cd397d295eb1d491618de55663e37cc2
SHA256

ed0a7fbf6b3066ffb3668e49f3029c923ecec06b9808fc17b26cd33c8a3e950b
SHA512

49857a8a7f73fbd63f46402463773485b840e4df6a9720db356a82169ba6f503cac3540e1aea5f920af7d6fbcd4c539171b7a64c1de34676208fec2765036187
SSDEEP

12288:vgFPpXWxUWXkwSRtbDz0BHjmp7xyQGzVYSVjGkv3CZum/2xPk9+WW6SbC:vgFPg1A6IpGBYSVjNv0exxWWDC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TAQAH_SHIP's PARTICULARS_1.doc.scr

Files

TAQAH_SHIP's PARTICULARS_1.doc.lzh
.lzh
TAQAH_SHIP's PARTICULARS_1.doc.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 708KB - Virtual size: 708KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ