M[.]V TBN - VESSEL'S DETAILS[.]docx[.]lzh | Triage

Sharing

Copy URL Twitter E-mail

General

Target

M.V TBN - VESSEL'S DETAILS.docx.lzh
Size

645KB
MD5

22a0b8ecd95b3a59d1c0bdd04935014d
SHA1

a2bdce8a903e9493a6d2131beb9b92c4d066860d
SHA256

209b3e3353b6a859a7ed91797d24336e0fbcabf35ce09e0c66bbec408bcf951e
SHA512

fa8242eff40b44ccd4dd73a0074919ed9c0f6e07d4adb8b3aedf083b0ca40ad08f5506a4ab9de931dcb171f77b600465b8cf5c884da9f18051edcb1781736716
SSDEEP

12288:tA7NTmGY2E80cN1oZnaQuIOL/7kh29Un8SH9yjrsjhmVromQS3GIc0Do:tE9mMZoZaQuIgkh2WnTWeo0HSWIc3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/M.V TBN - VESSEL'S DETAILS.docx.scr

Files

M.V TBN - VESSEL'S DETAILS.docx.lzh
.lzh
M.V TBN - VESSEL'S DETAILS.docx.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 715KB - Virtual size: 714KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ